I'm trying to understand how to use the query token. Based on the
documentation I've seen (Designer, IDM 3.5 policy), the meaning of Match
Attributes is "Select the attributes to search for." How do I indicate
what I'm actually searching for?

I get the feeling that I am totally missing the point of this token, but
without an actual explanation of what the token does, I can't be certain.
What I'm *hoping* this will do is allow me to search the
source/destination directory for all object that have attribute X == Z &&
attribute Y == NULL. Basically, I'm trying to do an LDAP search w/o using
XSLT

thanks
Matt