netcmd/ldapcmp: use set instead of list to find missing DNs