Use LDAP, requiring ops, for icinga admin

Change-Id: I56a7d37e4cbc3100ed0bc92c9e03f1ef7537cd87