17fcf2fed0
Linux hosts are a primary consumer of the directory — PAM/SSSD login, LDAP-backed sudo rules (sudoRole), and SSH public keys (openssh-lpk) — which is exactly what the custom schemas exist for. Describe LDAPS / StartTLS consumers as "Linux hosts and LDAP-native apps" instead of "legacy apps" across README, DEPLOYMENT, docs, and the Dockerfile. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>