s4-s3upgrade: improve idmap import to use posixAccount and posixGroup entries