ActiveDirectory calls groups 'memberof' rather than 'uniqueMember'