storing ldap passwords on HSM