support SSSD's allow groups and allow users syntax