[1.0.0] Security related fixes: value add / delete and sort keys.

[ChadSikorra]

Two things that need to be addressed:

1. Sort keys for searches escaped the ACL check. They are now stripped / withheld in the same way as the other attributes. The ramifications to this is sorting by something like userPassword in specific directions (asc / desc) along with accounts you actually know the passwords of.
2. A value add / delete on a modify leaks information when you have deny read but are allowed write. The obvious issue with this is one of the most common setups for userPassword. It gives someone with password reset abilities a way to basically guess existing passwords via result codes, as LDAP specifies a result code when a value already exists or does not exist. In the case of a deny read but allowed write, we now unconditionally return insufficientAccessRights for add / delete on everything that is not self. A replace is still allowed and is the recommended approach in this case for attributes you need that sort of ACL configuration on.