remove references to root dn