Added the reject_on_miss option to allow fall-through for users not in LDAP.