PR: https://forum.opnsense.org/index.php?topic=3684

Expand / join the descriptive text and explain floating rules a bit more.

Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily

We don't particularly need this code and the utility as netgraph
is always attached on load as long as we don't detach and the
attach per interface is a custom feature that requires a kernel
patch we don't want to keep around for 17.1.

Only thing we need to measure is the performance impact of not
detaching netgraph.  This only pertains to ethernet devices
anyway.

We do, however, keep interface_netgraph_needed() around for
reference as it's harmless by default.

LDAP fix: handle legal boolean return result from searchUsers()

Carp improvements

The old script had a lot of unused code in it, either stuff that couldn't be configured from OPNsense or dead code.