o.c.sec: LDAP Group-based authorization preferences

Before, this method wasn't actually usable because it could not
initialize (lacking non-arg constructor)