openssh-ldap-helper: config parse fixes, default params, group searching