LdapUserDetails extends CredentialsContainer in order to clear password when erase-credentials is true. Fixes gh-4029