samba.usermap: accept default realm
samba.usermap: make realm mappings more explicit