Support for nested group membership in AD emulation (Issue #7).