s4 winbind: Don't drop workgroup name for getpw*