Add ability to store extended principal attributes in LDAP