Expand on "remove from ldap" item in decommission doc