[Issue 10247] New: libldap should reject unrecognized critical URL extensions