access to *
	by group/groupOfNames/member.exact="cn=phones,ou=groups,dc=gnulab,dc=org" read
	by users read
	by anonymous none
	by * none