`ldap.yml` has no knowledge of `external_systems` only `credentials.yml` does. I did it this way because I thought that eventually more things would want to use an external system for authentication