ipa-ldap-updater: make possible to use LDAPI with autobind in case of hardened LDAP configuration
    
    When nsslapd-minssf is greater than 0, running as root
      ipa-ldap-updater [-l]
    will fail even if we force use of autobind for root over LDAPI.
    
    The reason for this is that schema updater doesn't get ldapi flag passed and
    attempts to connect to LDAP port instead and for hardened configurations
    using simple bind over LDAP is not enough.
    
    Additionally, report properly previously unhandled LDAP exceptions.
    https://fedorahosted.org/freeipa/ticket/3468
    
    Reviewed-By: Petr Spacek <pspacek@redhat.com>