allow stacking of a default chaining control when chasing further referrals; fix referral return memory allocation on direct search

import selected improvements from back-ldap: use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup

use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup

of ldap_start_tls_s().