introduces new param --onlyusers for ldap sync