s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)