LDAP user cleanup claims to disable users it isn't actually disabling

The log messages always state that the user will be disabled even if it won't actually be disabled as it is already disabled. This makes it hard to see, e.g., in a dry run, what would actually happen.