Title: #253: Use the ad_account_can_shortcut function in sssd server mode
Without the patch the search by ID does ldap lookups for all domains one by one and
decides that the returned entry is from different domain after the lookup was made. With
the patch it only goes for the main IPA domain (which is fast, because we are in server
mode) and the correct AD domain. Other AD domains are skipped.
LGTM (will ack when CI finishes - takes long time this time)
See the full comment at https://github.com/SSSD/sssd/pull/253#issuecomment-298119558