[SSSD-users] How to kindly, gently expire bogus cached auto-discovered AD domains?