master needs sssd_template param