fn effect_from_probe(probe: &Result<(), LdapError>) -> TargetEffectExpand description
Only invalidCredentials proves the write didn’t land; any other answer says nothing. A locked
out or disabled account also answers invalidCredentials, so it reads as not applied.