s3/smbldap: add option to disable following LDAP refs