fixes #5241 - Add support for external user groups.

Define external_usergroups to be then used by LDAP group mapping (http://projects.theforeman.org/issues/813) and Apache based groups (http://projects.theforeman.org/issues/3892).