[SSSD] Need a strategy to manage AD group names for unix consumption