added options for pam_sss (RedHat only)