[SSSD] [PATCH] IPA: Handle requests for netgroups from trusted domains gracefully