Some operational environments require that passwords are read at run time from external processes, and not hardcoded in configuration files, even in encrypted format. As per 4.3.0.GA_CP04, LdapExtLoginModule does not have this capability. A patch has been written, tested and available to be attached to the JIRA issue as soon as it is created.