Improve the wording of the LDAP group attributes documentation and expand the examples.
object-fit: contain