The list of attributes that a host bound as itself could write was overly broad. A host can now only update its description, information about itself such as OS release, etc, its certificate, password and keytab. ticket 416
The update files are sorted before being processed because there are cases where order matters (such as getting schema added first, creating parent entries, etc). 10 - 20: Schema 20 - 30: FDS Configuration, new indices 30 - 40: Structual elements of the DIT 40 - 50: Pre-loaded data