Issue Description

A search for attributes in cn=config should return all attributes, including the ones the user didn't set and which uses their default value.

There are attributes, such as nsTLSAllowClientRenegotiation and allowWeakCipher, which are not returned in a search if the attribute was not set

Package Version and Platform

389-ds-base-1.3.9.1-10.el7.x86_64
389-ds-base-1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64

Steps to reproduce

1. ldapsearch -D "cn=Directory Manager" -w password -p 389 -h server.example.com -b "cn=encryption,cn=config" -s base nsSSL2
   dn: cn=encryption,cn=config
   nsSSL2: off
2. ldapsearch -D "cn=Directory Manager" -w password -p 389 -h server.example.com -b "cn=encryption,cn=config" -s base nsTLSAllowClientRenegotiation
   returns no attribute.

Expected results

A search in cn=config should always return all attributes - including the ones that use their default value because they are not set by the user.

Background information

If we have a consistent behavior (all cn=config attributes incl. the ones with default values) are shown, then we could write a script that lists all attributes. We could use this list to identify what attributes are missing in the docs before a release, but also to identify attributes that have been removed.

I know that this wouldn't help us to create a full list of attributes in cn=config because some DNs don't exist by default or are dynamic (e. g. cn=<suffixDN>,cn=mapping tree,cn=config), but it would be better than nothing. :-)