split in get selections should only split line at first :, so answers ca...

split needs to be told to only split on first ':', otherwise there's an error if you have an answer that already has a : in it. I had this problem configuring ldap-auth-config/ldapns/ldap-server, which has a default value of ldapi:///

also, need to pass use_unsafe_shell=True when setting selections.