Account Search Endpoint allows easily crawling customer base

[craastad]

curl http://id.euro2.ee:8080/v1/ldap/search?searchString="kaar"

LdapController.search(...) allows someone to enumerate personal info, (first name, last name, ID code), by searching names. It’s easy to walk through a list of common Estonian / English names and enumerate our entire ID database.

Problem is this is used currently in the client to make it convenient to look up accounts to send money to. Are we sure we still want this feature? Do we need to display Names *AND) ID codes in the response?