LDAP memory reductions
Re-architectured sync trigger to only come from controllers, not in after_save callbacks