[SSSD] Question about ipa_domain option