Notes:
* advantagesadvantage over proposal I: we hit the LDAP server less* disadvantagesover proposal I: the length of the ETag depends directly on <code>csn</code>. What happens if we have multiple LDAP objects for one resource?
* the security implications of this proposal are unclear