Add ldap_start_tls() capability for connection.

Upgrades the security of a plain connection to an encrypted channel, which is strongly recommended for plain binding (DN/password).