trusts: Allow reading ipaNTSecurityIdentifier in user and group objects

https://fedorahosted.org/freeipa/ticket/4385