We tested this recently on #maemo-ssu and it seems that "Normal(TLS)" is the equivalent of STARTTLS, meaning forcing a TLS connection on port 143 rather that talking to an imap4s server on port 993 and then checking if TLS is supported by the server.