add the alternate solution to UVA's empty 'groupofuniquenames' objects - change them to 'groupofmembers'

Fix issue where entries sometimes have pwdChangedTime defined already.  In that case, skip the processing.

Add logic to set the OpenLDAP pwdChangedTime attribute based on expiration time logic from ODSEE.  Re-write to use Getopt::Long for the options.

nsAccountLock is an ODSEE attribute for password policy.  If it is true, lock the account.  Either way, remove the attr from the entry.

Don't transform nsuniqueid, it is not compatible with entryUUID. Delete it instead