If using LDAP search filter under Authentication server - will it respect nested groups? Or does it only enumerate users within the named group?