fixed the ldap sync code so it now creates users if they do not exist when publishing certificates