Browse to trustees in PRDs still writes dotted notation and not LDAP.....requires manual entry for LDAP dn so compare doesn't continuously complain and deploy doesn't destroy ACL's:

Bug 1083876