- Flush handlers before configuring olcTLS*, so that slapd restarts and it's

  ssl-cert group membership takes affect.
- Use with_items instead of with_dict to force the order of the loop items.
- Enable service ldaps bind after the olcTLS* settings were committed.