It might be not needed for groups/shared folders/resources as we
create them in custom domains only, but I think it's better to treat them all
the same as users.
It will have small performance impact, but the result of this
method is internally cached by Net/LDAP3. If this becomes a problem we can
extend it with Redis support and use this cache (it already supports Memcache).