WHATSNEW: Add "ldap ssl = start tls" to the release notes.