[SSSD] [DESIGN] Allow Kerberos Principals in getpwnam() calls