auth4: use "anonymous sam winbind sam_ignoredomain" with ROLE_DOMAIN_MEMBER