when we have data in LDAP, we will migrate to an LDAP search to canonicalize email address.  it should use the same LDAP connection - so that the three different ldap interactions that occur from within the server use exactly one SSL ldap conn regardless of the number of LDAP queries.