Add LDAPext refer I-D.

Fix interactive and automatic modes.  Quiet needs work.

using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.

Add additional notices.  Likely need to add a quiet mode.

(used by clients/tools/ldap*.c)

Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters