suggestion:  switch `entry` and `ldap` arguments in this new method signature to match the order of items yielded by `each_ldap_entry` to avoid confusion, unless there's a particularly compelling reason not to do so.