Return directory references with deterministic order

When getting a SQL directory reference, i.e., a multi-value list, for example the members of a group, the order is not deterministic because SQL does not guarantee anything about the order of the returned rows.

We should add an explicit sort to get a deterministic order, so that the users and the tests don't see changing order.