s3: smbd: Ensure we always go via getgroups_unix_user() when creating an NT token.