I have a scenario where an attribute change on a user in the Vault, will
trigger a delete of a user in a connected ldap system.

I have written something on the ldap driver on both the the ET and Command
channels(exlusively of course). In the ET i simply do a direct delete,
remove association, and veto. I can write something on the Command channel
but will have to strip the modify out and reformat the operation as i do
not want to do direct delete and the veto, because i will ahve the veto
show up in my auditing.

So I am curious of the advantages and disadtages to doing this operation
in one place vs the other? Thanks!!