adding unless wrapper around 'RequireMembershipOf' line in pbis.conf.erb