s4-ldap: use common functions for ldap flag controls encode/decode