Currently, this is being called on the LDAP db every time. We should make it cache the result instead.