LDAP and Active Directory with the service account's password off the heap: a socket factory for JNDI (and so for Spring LDAP and Spring Security's LDAP support) that encrypts with seclume's own TLS and writes the password of a simple bind from native memory - JNDI only ever holds a placeholder.