Add trusted domain range objectclass when using idrange-mod
    
    When modifing the idrange, one was able to add ipa NT trusted
    AD domain sid without objectclass ipatrustedaddomainrange being
    added. This patch fixes the issue.