disable ldap accounts for long-idle people
We have some ldap accounts registered for people who have not been doing Tor things for a long while.
Here are some: jgay huseby flamsmark cristobal eyv
I think we should disable these accounts, to reduce general vulnerability surface area -- and I hear from the TPA folks that it is easier to re-enable them if we want to do that at a later point, so this step doesn't need to be regarded as a momentous decision.