Add option to get transitive members of groups

[wipash]

This allows complicated nested groups in AAD to be synced to AD as just a flat list of all users. Handy if you don't want to sync a bunch of intermediate groups.

My use case, I have an ACL group in Azure AD that I want to use with an onprem filesystem:

AAD

ACL_FS_Admin_Files_Modify
└─Role_Business_Admin
│ └─User 1
│ └─User 2
│ └─User 3
│
└─Role_Accounting_Admin
  └─User 2
  └─User 3
  └─User 4

Using transitive members of ACL_FS_Admin_Files_Modify, I can sync the group membership so that it the resulting membership in AD is:

On prem AD

ACL_FS_Admin_Files_Modify
└─User 1
└─User 2
└─User 3
└─User 4