Requested by erin 8 months ago in legacy/trac#28769 but we dropped the ball on following through. The sort of ldap disable where it gives a grace period before turning off the email address seems like a reasonable choice here. And when this is done we can close legacy/trac#28769 too.