closes #173
No need to keep them in two places at the same time. We can fetch them from LDAP whenever we want to do something with them.