Filter with auth-proxy

yes, i have already discovered that setting filters on the commandline works

in the end the auth.sh script should generate _root and include dirs dynamically from ldap queries,
so setting filters on the commandline isnt an option.