s3: Fix getent group if trusted domains are not reachable