s4:libcli/ldap: the tls code steals the original socket on its own now