[Freeipa-users] Invalidate cache for AD groups