s3: Check for lp_winbind_trusted_domains_only in wb_gettoken()