ad: shortcut if possible during get object by ID or SID
    
    When getByID or getBySID comes from responder, the request doesn't
    necessarily have to contain correct domain, since responder iterates
    over all domains until it finds a match.
    
    Every domain has its own ID range, so we can simply shortcut if
    domain does not match and avoid LDAP round trip. Responder will
    continue with next domain until it finds the correct one.