Instead of hitting LDAP to translate every UUID into a username, Gatekeeper should hit an intermediate cache first.