improvements to the APT for core modules (ISIS-22); moved some LDAP notes out from core into the alternatives/security/ldap