o Fix ldaps to accept self-signed CAs
o Try DNs in series, since parallel is a violation of LDAP spec
o Unbind after successful bind