Add recursive_group_search_fallback option

This lets us disable the fallback recursive group search when
virtual attributes aren't enabled. This may be necessary for large
directories that don't support virtual attributes due to performance
issues.
Avoid recursive group search when not enabled