Actually, I guess nulling out entry->tl_data could be a problem if the 
LDAP back end has encoded stuff like the DN in there.  So maybe that's not 
a good workaround either.