[Freeipa-users] HBAC and external groups (AD trust)