Add LDAP nested groups

This pull request adds support for nested groups, i.e. groups that may contain groups.
Group members are resolved recursively, cycles should be detected.