handling this in authAD and authLDAP as well would probably make sense, but can be done in a later PR. maybe open an issue