Right now, when the DirectoryManagerGeneric is asked to find string results, it will perform membership queries against the RemoteDirectory that require it to return Group or User objects, and then convert the results to strings again afterwards. This can be inefficient, especially when the underlying DAO may have its own string caches (which is the case in Confluence). This should be changed to perform string queries directly, to avoid double handling of the result objects.