Convert members into types in sudorule-*-option
    
    The indirect members need to be calculated and the member
    attributes converted. This is normally done in
    baseldap::LDAPRetrieve but these methods provide their
    own execute() in order to handle the option values.
    
    Update sudorule_add|remove_option tests to include check
    that converted user/group exists in the proper format.
    
    https://pagure.io/freeipa/issue/7649
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>