[SSSD] [sssd PR#608][synchronized] AD: consider resource_groups in PAC as well