Squid proxy config for using AD groups without external ldap acl