ldap: allow specifying the encryption used

So the user can decide between SSL/TLS.
We still default to encryption on and use the default ports since
no one required something different until now and
to not bloat the config.