Found while testing the fix of #159: If you run without a `--users` argument, no users are read rather than all ldap users being read.