With regards to the RCP port grabbing. As I was suggested by support: setting the "Password Sync Timeout" to '0' will disable the publishing of password and the RCP port grabbing. I did the following test with success:
* 2 AD drivers on one remote loader.
* AD driver A has password sync
* AD driver B has no password sync. I configured "Password Sync Timeout" to '0'
* Start AD driver B first, then start AD driver A
* Change your AD password. Password is synchronized via driver A.