It will be important to restrict the access to Kiwi based on the LDAP Role. So for example "alumni" or "guest" should be excluded.