change data type of ldap_whochange_* parameter

The parameters ldap_whochange_sshkeyand ldap_whochange_pw should only accept user or manager values.

The current datatype String is too permissive and should be Enum.