Refs #351: This has evolved into a rewrite of how the LDAP sync works