Note the default behavior of `LDAP_USER_OBJECT_FILTER`. Compare the groups and the blueprints examples, and note that the groups examples additionally shows how to use `@login_required` (this was hard to find!)
