Update schema for bind-dyndb-ldap
    
    Add new attributes and objectclasses to support new features:
      - global bind-dyndb-ldap settings in LDAP
      - conditional per-zone forwarding
      - per-zone configuration of automatic PTR updates
      - AllowQuery and AllowTransfer ACIs
    
    https://fedorahosted.org/freeipa/ticket/2215
    https://fedorahosted.org/freeipa/ticket/2072