LDAP security disclaimer

Only refreshed on log in subject to #7369?  At the moment it's only on the cronjob I thought.