[Freeipa-users] Allow "sudo su - USER" to only the specified user