[Observium] LDAP/AD nested groups