encryption is LDAP compatible