ipa-adtrust-install should ask for SID generation
    
    When ipa-adtrust-install is run, check if there are any objects
    that need have SID generated. If yes, interactively ask the user
    if the sidgen task should be run.
    
    https://fedorahosted.org/freeipa/ticket/3195