add "default" option to LDAPReferrals, to allow "off" to really mean "off". Need compatibility tag/note if backported. Submitted By: Jan Kaluza & Eric Covener