clarification on ldap with ssl/tls