Since we don't write to AD, a read-only replica is fine
[FIXED JENKINS-17676]

Fixed the regression caused by the introduction of ldapEscape