[SSSD] [sssd PR#976][synchronized] ad gpo: use ndr_pull_steal_switch_value