ldap_client_tls_checkpeer question