Would be nice to have Transportation Layer Security (TLS) for LDAP transactions. Which basically encrypts the LDAP conversation.
Koha can already do ldaps:// connections, if that's what's presented in the KOHA_CONF's <hostname> config.