it would scare me if the OpenLDAP community was not
aware that LDAP was not intended to be an authentication store.
LDAP and X.500 have always been designed to support in-directory
storage of secrets, namely passwords, used for directory and
application authentication. The OpenLDAP community is certainly aware
of this fact.