A slave server has to be read-only, right? Who are the ones that can nevertheless write to it? rootdn and updatedn? Or only rootdn? If I create a new user for the replication and give this user write access to the database via ACLs, will it be able to write to the database even with it being a slave server?