I think there should be a way for regular users to add the tlds, as we do not want the rootdn/rootpw to be used, because these entries live in the configuration file.