r23945: add infrastructure to select plain, sign or seal LDAP connection