fix template to handle empty sssd config sections