feat: reflect disabling users in LDAP

[t-aleksander]

Currently, disabling a user only prevents them from connecting to the VPN, logging in, resetting password etc. One lacking feature is reflecting this state in the LDAP. Probably the easiest solution would be to filter (delete) disabled users altogether from LDAP.