For large systems where domains are managed by ldap, it would be great if those also were read from ldap.