[SSSD] [sssd PR#438][comment] krb5_child: Distinguish between expired & disabled AD user