LDAP client yaml is *also* a per-site knob.