Re: [SSSD] Design Discussion: Restricting domains per PAM service