Some good secure enhancement for LDAP:
* Password Change - there is no way to change passwords using LDAP authentication module;
* SSL over LDAP - maybe this change also affect wre.