Will this fail if they don't include dn in their Get-Group attributes array?