In case ldap_install_tls fails, should we call ldap_unbind_ext?