for LDAP users we now encrypt password prior to saving to db