netcmd: models: make GroupManagedServiceAccount.trustees a property