winbindd: add "winbind scan trusted domains = no" to avoid trust enumeration