Rules which are required by BSI Grundschutz but not by our focused building blocks

[sluetze]

This issue shall collect rules we find are a relevant selection from BSI Grundschutz, but are not required by sys.1.6 and app.4.4.
The reason to collect them here is, that we might use it as a basis to implement additional rulesets after finishing sys.1.6 and app.4.4.

• ocp_no_ldap_insecure (APP.2.3 (OpenLDAP) / APP.2.2 (Active Directory))
  source: APP.4.4.A3 #29 (comment)