s4:samr Split most of samr_CreateDomainGroup into a helper function