* feature: AD support nested groups (resubmit #7175)
Don't let groups with periods in the name cause issues.
* Merge #7245 into this PR
* Capture Exceptions in get_userlevel()
* Throw generic error if auth_ad_debug is not enabled to prevent information leak.