Add service group support in-instance with nslcd

This adds support for searching the per-peoject LDAP OUs
for service users and groups.

Change-Id: I4829c2584682bb068aa17c606fae093849a02a42
Merge "Add service group support in-instance with nslcd" into production