Alter LDAP ACL
Alter LDAP ACL

This commit moves several fields over from being editable by no-one to
being editable by Realm Administrators.  Notably fields related to
visible names are now editable by realm admins.  Edits to these fields
are to be made only after the corresponding form has been filed.

This commit also alters the SASL regex to use the correct value so
that the changes to field protection are actually usable.

tdorianh/cv_config,the-maldridge/cv_config,collegiumv/cv_config,tdorianh/cv_config,m-wynn/cv_config,m-wynn/cv_config,dinoocch/cv_config,dinoocch/cv_config,collegiumv/cv_config,the-maldridge/cv_config