Thanks Matthew! I'm sure other s will find that useful!

Please excuse my ignorance (I'm not particularly familiar with OpenLDAP) but does this make sense to include by default? Is there a downside to including it OOTB? If so, perhaps scripting it (so users could just run that) is another option?