[SSSD] [PATCH] Two minor enhancements on using the negative cache in the PAM responder