use ssl connection to upstream ldap