propagated. Return all operational attributes as well as user
attributes for final comparison; DBs should be 100% identical
except for the auditContext attribute which only exists on the master.

not directoryOperation usage.  Update test000 to
request return of only @monitor attributes.

/* FIXME: there's no easy way to ensure
 * that add does not cause multiple
 * userPassword values; one way (that
 * would be consistent with the single
 * password constraint) would be to turn
 * add into replace); another would be
 * to disallow add.
 *
 * Let's check at least that a single value
 * is being added
 */

Rename ManageDIT to Relax