At present you can enable TLS on LDAP authentication, but you need to edit the classes/class.cldap.php file and change the 'starttls' => null to true.

Could the LDAP authentication screen be modified to have a 'Enable TLS' checkbox to enable it instead.