[SSSD-users] Simplify ldap `memberOf` searches