s3:winbindd: avoid directly asking a trusted domain in wb_lookupsids*()