LDAP status quo and where to go from here

AFAIK ldapalchemy did not fly. We did fund a single sprint for it, but that did show that it would have got too expensive. Instead, we ended up optimizing pas.plugins.ldap for our purpose.