Freeipa sync bugfix

[aebruno]

• Fix bug in freeipa unix group syncing to exclude renewal requested status
• Clean up logic in freeipa expire user sync