See the following:

We should default to being secure out of the box, so let's make the default "No" to caching user passwords locally - doing so makes no difference with a functional LDAP server being authenticated against