Don't try to bind on TLS failure
    
    We have bind code that can handle the case where a server hasn't
    come up yet. It needs to handle a real connection failure such
    as the TLS hostname not matching. If we try to bind anyway we end
    up with a segfault in openldap.
    
    https://fedorahosted.org/freeipa/ticket/2301