Proposed *_compat updates to nsswitch.conf.erb and params.pp

When using netgroups to restrict logins, the shadow_compat and passwd_compat  NSS service definitions are used.