Is your feature request related to a problem? Please describe.
Some users have strict requirements where and how password are stored.
For LDAP sources (not sure about other external sources) Authentik however writes the passwords in its own (hashed) format back to internal tables. This potentially reduced password security and in the case that always binding to LDAP is enabled also does not offer any performance benefits regardless.

Describe the solution you'd like
An option to suppress writing the password to authentik tables for external sources (LDAP).

Describe alternatives you've considered
Because we liked authentik so far during an internal testing phase I currently consider adding a Postgres trigger to prevent any writebacks to the password column of the user table (except for the akadmin user). This is obviously fragile, hacky, and is not possible for setups with both local and external users.

Additional context
Discord discussion