Make active/inactive AD user sync an opt-in feature for existing directories

CWD-995 introduces synchronisation of AD active/inactive users. This feature may surprise sysadmins because it changes the behaviour of existing directories. Make it optional using a switch in the UI. It should be enabled by default for new directories, and disabled for existing directories. Therefore, customers can opt-in for this feature only if they have read the documentation and understand the consequences.