NSS: Fix invalidating memory cache for subdomain users
    
    get_next_domain() was called without any special flags, meaning it only
    iterates over main domains. We need to instead use the SSS_GND_DESCEND
    flag to make sure sudomains are taken into account, too.
    
    Reviewed-by: Michal Židek <mzidek@redhat.com>