s3-winbindd: Use correct realm for trusted domains in idmap child