LDAP Authentication with Encrypted Credentials

I can’t get ldap authentication to work using encrypted credentials, as described in General LDAP Setup | GitLab.

gitlab-rake gitlab:ldap:check returns:
Exception: invalid binding information

even though the secret looks ok. If i enter the same bind_dn and password in the gitlab.rb file, it works.

any idea what i’m missing?