This was relying on a slapos patch allowing to serialize sets, but
that was not useful, because we had to encode the sets ourselves in the
profiles.