Good point.   I now do this here: https://github.com/theforeman/foreman/pull/1087/files#diff-127a850b7d7b20173ad3fba88f8a25e3R304

Added benefit of capturing firstname/lastname/mail address changes in LDAP, too.