2.10.0-beta2
MONITOR: switch user to configured before exec(service)
DEBUG: reduce log level in case a responder asks for unknown domain
KCM: run under SSSD_USER by default
NSS: don't `fchown()` mem-cache files
RESPONDER: use proper context for getDomains()
PAM: grant 'cap_dac_read_search=p' to sssd_pam
SSH: Remove two unused configuration options