s4:ldap.py - add test for "tokenGroups"