Nested groups and sssd filters