Add nestedGroups option to ldap