Replication with StartTLS doesnt appear to work

Using ApacheDS replication using StartTLS doesn't seem to establish a secure connection. There is not much documentation available, but I have ads-replusetls set to TRUE. Watching the network traffic, the replication user's bind credentials seem to be transmitted in plaintext. Further traffic is also clearly readable. I don't believe StartTLS is being used.Is there anything additional I need to do to make things work. Issue seems to exist in M16 and M19.