[Issue 10247] libldap should reject unrecognized critical URL extensions