netapi: add NetUserGetGroups to IDL.