[SSSD-users] SSSD and nested AD domains

I haven't been able to find much useful information on how sssd (if at all) handles child domains in Active Directory. If you join an AD domain, presumably you can authenticate any users in the children domains, but what happens when you do "getent" do you expect to see users of the child domain reflected in the getent (since you are joined to the parent)? Do you expect to always be able to lookup users SIDs and UIDs from the children of the domains you joined? What about the parents?