Can pull from ldap, generate add/remove deltas