The org.jboss.security.auth.spi.LdapLoginModule class contains unnecessary constant

private static final String BIND_CREDENTIAL = "bindCredential";

It's only used in traceLDAPEnv method which is responsible for masking passwords in module options. The "bindCredential" is not a valid option in this login module.