[SSSD] Fix #2275 nested netgroups do not work in IPA provider