uniformly exploit rootdn bind; add support for rootdn bind to backends that didn't have it (ITS#4962)