i believe  most users should be satisfied with default dn choice  this way we allow user to just flip the switch and try it on without selecting another dn  we have the same setup for   dumb   member 