v3-schema: Add new ipaExternalGroup objectclass
    
    This construct allows to have a group of ipaExternalMember attributes, that can
    be nested in a normal ipa Group ('memberOf' is allowed).
    
    It cannot contain normal ipa users/groups and cannot be nested with another
    group of the same type ('member' is not allowed).