VLV controls are disabled because we are not clear that their implementation is correct. We need a way to test these controls against an LDAP server that we are confident implements them correctly. See the information in ldapjs/node-ldapjs#797 (comment) for more detail.