Ensure that all domains are checked for users/groups
    
    There was a bug in the negative cache checks (probably a leftover
    from when filter_users was global-only) that meant that if a user
    was filtered out of a domain, the remaining domains would not be
    checked for that user. (Same for groups/initgroups)