no need to exclude @ldap and @user_sync, just @user_sync should do