ldap_start_tls_s and automatic CA certificate searching