use Truststore Spi
Can be one of ALWAYS, ONLY_FOR_LDAPS, or NEVER:
ALWAYS- Always use the truststore SPI for LDAP connections.NEVER- Never use the truststore SPI for LDAP connections.ONLY_FOR_LDAPS- Only use the truststore SPI if your LDAP connection uses the ldaps protocol.