When calculating indirect membership don't test nesting on users and hosts.
    
    Members are dereferenced when calculating indirect membership. We don't
    need to check hosts and users for members.
    
    This significantly reduces the number of queries required for large groups.
    
    https://fedorahosted.org/freeipa/ticket/1885