Is it possible to require groups from OD using mod_auth_apple? I'd like to be able to authenticate against OD while limiting based on groups. Thanks!