Allow disabling LDAP subgroups resolution

Resolve potential subgroups when loading mapped LDAP groups can be very expensive when the group contains main users which is a pain when you know there is no subgroups at all.