change nss_base_group to look for groups recursively