Is there any option to encrypt the bindpw instead of using a clear
Not as far as I know. I've tried to use passwords encrypted by
slappasswd but it'll fail to bind. I've settled for creating an user
that has read-only access to my directory and binding with this user.