dsdb: Ensure "authenticated users" is processed for group memberships