s3-passdb: convert pdb_ldap to use secrets wrappers