Require TLS for Manager?

["David H. Hawes" <dhawes@vt.edu>]

Is there any way to restrict access so that the root user (rootdn) cannot 
bind to the LDAP without a certain security level (i.e. TLS)?  Setting 
'security ssf=128' and 'security tls=128' and setting ACLs to deny binding 
for ssf only works for normal users and anonymous.  Ideally I would like to 
deny anyone, including the root user, access to the LDAP without using TLS.  
Let me also add that I would like to use startTLS and not ldaps. 

Thanks for the help,

dave