Add support for StartTLS

StartTLS seems to be the recommended way of using TLS/SSL with LDAP. This pull request should not break existing code.