I am looking for examples of owner_mode = ldapgroup to understand it better. How does this parameter differ from filter_by_owner?