Hide trust-resolve command

We do not need to expose a public FreeIPA specific interface to resolve
SIDs to names. The interface is only used internally to resolve SIDs
when external group members are listed. Additionally, the command interface
is not prepared for regular user and can give rather confusing results.

Hide it from CLI. The API itself is still accessible and compatible with
older clients.

https://fedorahosted.org/freeipa/ticket/4113

ipalib/plugins/trust.py

@@ -978,6 +978,7 @@ if _nss_idmap_installed:
         return unicode(string)
 
 class trust_resolve(Command):
+    NO_CLI = True
     __doc__ = _('Resolve security identifiers of users and groups in trusted domains')
 
     takes_options = (