Add domain boundaries to user/group/project lists

With respect to the domain concept, the access of a user should be
contained inside the scoped project or domain. This is a preliminary
support of domain in the three listing features.

Implements: blueprint domain-trusts