LDAPS or StartTLS? That is the question…