Spell ldap options correctly, do not restart sssd if only Kerberos enabled.