Thanks for your suggestion Chris! We do have an active feature request on this and have associated this community post with it. 

Note that I tried enabling LDAP from my incoming gateway to my Active Directory server, and it went badly.   Bugs caused valid recipient addresses to be discarded.   These have been reported and are in the work queue, and will probably be released with LDAPS.  But it is not ready for prime time yet.