ad: Add support for passing --add-samba-data to adcli
    
    This adds a new option named `ad_update_samba_machine_account_password`,
    which when enabled, will pass `--add-samba-data` to the adcli command
    for updating the machine account password in Samba's secrets.tdb
    database.
    
    This option is necessary when Samba is configured to use AD for
    authentication. For Kerberos auth, Samba can use the system keytab, but
    for NTLM, Samba uses its own copy of the machine account password in its
    secrets.tdb database.
    
    See: https://pagure.io/SSSD/sssd/issue/3920
    
    Signed-off-by: Andrew Gunnerson <andrewgunnerson@gmail.com>
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>