[LDAP] improve processing nested groups

- split walkNestedGroups into two distinct methods, for $recordMode
  determiniation was always wrong in subsequent runs. This also simplifies
  the code.
- add runtime caching to avoid duplicated LDAP requests. Later on, members
  are cached on Redis.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>