Initialise TLS context last, after setting all the TLS options, else they're not respected...
LDAP_OPT_DEBUG_LEVEL only appears to work if set in the global context