support simple_tls encryption mode for Net::LDAP

Our LDAP server uses simple_tls, rather than start_tls. This change defaults to start_tls for backwards compatibility.