Resolve SIDs in Web UI
    
    Introduce new command, 'trust-resolve', to aid resolving SIDs to names
    in the Web UI.
    
    The command uses new SSSD interface, nss_idmap, to resolve actual SIDs.
    SSSD caches resolved data so that future requests to resolve same SIDs
    are returned from a memory cache.
    
    Web UI code is using Dojo/Deferred to deliver result of SID resolution
    out of band. Once resolved names are available, they replace SID values.
    
    Since Web UI only shows ~20 records per page, up to 20 SIDs are resolved
    at the same time. They all sent within the single request to the server.
    
    https://fedorahosted.org/freeipa/ticket/3302