Document NSS Idmap API

While I'm here fix return code for updates.