[SSSD] nested groups: allocate more space if deref returns more members