Sam proposes separating the alias database from the principal database to facilitate integration. If we go that route for DB2--say, using a second DB2 database for aliases--how do people think LDAP aliases should be handled? Perhaps a separate container DN for aliases?