Find group members who are Disabled so that we don't try to add them again

Otherwise Disabled users in RT who are still in an LDAP group being
imported may cause errors like:

    Failed to add <user> to <group>: Group already has member: <user>