if configured to use a service account, bind to it to construct the full dn