master
SYSTEMD: don't chown() logs
SYSTEMD: Don't mix up responders' socket and monitor activation
Make sure previously rotated logs are chown-ed as well.
Got rid of 'secrets' responder and it's support in KCM
SERVICES: allow to run socket activated sssd_nss under SSSD_USER
PAM: grant 'cap_dac_read_search=p' to sssd_pam
PAM: no need for root:root owned socket
SUDO: make 'sssd_sudo' socket sssd:sssd owned
systemd: relaunch sssd after unclean exit