We are using SSSD and want also to use ldapquery for the case to create local accounts from ldap because we kind of have systems that do no support SSSD. Since we also need somehow a way to remove the manuell hiera structure for the accounts that are also in the ldap already....