TODO item: do SSL in all ldap connections that authenticate