APM: admin-encrypted-password changes with every configsync.

Every time after I do a configsync, the value of "admin-encrypted-password" (in an "apm aaa ldap" section) changes, as is shown in the output of diff run on the bigip.conf files from the active and standby devices. I wonder what is going on there.

I am on v11.6.0.