dn: cn=readonly,ou=service-accounts,{{ base_dn }}
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: readonly
description: Read-only service account
userPassword: {{ password_hash }}