Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?