Tells Radiator to search first for the user DN then do a search with scope base to fetch the attributes. Required, for example, to get access to Windows AD constructed attributes, such as tokenGroups, which are only returned when the search scope is set to base. Defaults to off.