How to set up LDAP filter for nested groups with VIP Enterprise Gateway