cups: nsswitch client subject
various