feels like there should be a:
> ldapsecurity->createUser(IUserDescriptor)