S21 Flex path points to /usr/sfw unnecessarily
S22 Saner host defaults in /etc/nsswitch.conf