escape user-provided string when building LDAP query
check in Cargo.lock (fixes build, upstream breakage in lber)