s4-ldap: mark all ldap:// requests as untrusted