The plan is to get rid of all ldap stuff (methods like userlist, includes_cn?, etc...) and use ldap_fluff for that, but I think that should go in a separate PR.