* 'master' of git+ssh://db.debian.org/git/userdir-ldap:
fix
userdir-ldap-slapd.conf.in: explicitly list readable attributes. End with 'by * none'.
ud-generate: Also rebuild if one of our keyrings has changed, even if ldap has not.
ud-lock: support supplying a status to set instead of 'retiring'