LDAP can now optionally be connected to using StartTLS, and you may unsafely skip verification. Contributed by @getz