I decided to play around with keycloak and use OpenLDAP as the backend to store the user details. That sounds like a pretty simple thing to set up, and actually it was - that is until I noticed that when I modify a password in keycloak then it gets stored in plain text in the ldap database. Goog...