https://www.ejabberd.im/forum/25314/ejabberd-ldap-roster-restriction en