Fix validation of service_user, service_pass config keys

They are required only when anon_queries are false and server_type is
ActiveDirectory or FreeIpa.