thanks, I will test it. But the feature request will be still active because I believe that this makes sense by default. If you don't need it, you can activate "Hide from LDAP" for the affected object.