s4:sam.c - make "authsam_expand_nested_groups" public