authconfig sets the undefined configuration value "ssl no" in nslcd.conf

Issue

We noticed that when using authconfig like

/usr/sbin/authconfig --kickstart --enableldap --enableldapauth --ldapserver ${LDAPNODES} --ldapbasedn ${BASEDN} --enablelocauthorize

what is being written to /etc/nslcd.conf contains

ssl no

However, no is not documented value for the ssl directive.
While looking at man (5) nslcd.conf

 ssl on|off|start_tls
  Specifies whether to use SSL/TLS or not (the default is not to). If start_tls is specified then StartTLS is used rather than raw LDAP over SSL.  Not all  LDAP  client  libraries
  support both SSL, StartTLS and all related configuration options.