wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the creden...