[SSSD] Design page: Automatic private group creation for the LDAP provider