[SSSD] Re: Question regarding domain-local groups filtering