The entire `bindDN` should come out of config. We should not build a string for it.

Developer testing with your own email address would have a different DN format than the share credentials which we'll use in stage and production.

This was already built out into config? What is the benefit of nuking it?