Remove duplicate group_tree_dn setting from kerberos scenario

The keytone domain config for the kerberos scenario had a duplicate
group_tree_dn setting.  This didn't cause any problems, but there
should be be a duplicate setting.  This removes the duplicate.