Handle unknown hashes in secondary-pass code gracefully.
Introduce LDAPUser.bind_as() to rebind LDAP.
Use bind_as() in secondary password code.
Merge pull request #1 from mgorny/sec-pass-cleanup

Secondary password: bind_as() and unknown hashes