So while this is perfect for working with both PKI, and FreeIPA, for
most of the JNDI/LDAP world, authorization consists of membership in
groups. I believe the is how the original JNDI plugin works. When we
extract this into its own RPM, we should keep that in mind, and allow
the configuration to specify which way it is going to be used.