[Feature Request] run AD connector under domain user instead of admin