cps still requires you to send out a key but you can send out multiples at once. The keys are a little different. When a user opens the key from their email, a username password box appears with their ldap username listed. they then have to put in their ldap password and check trust server. I recommend not checking save password if your network requjires you to change your ldap every so often.