2.10.2
MONITOR: switch user to configured before exec(service)
CACHE_REQ: always return the first result in service by port lookups
IFP: Restrict destination
KCM: run under SSSD_USER by default
Expose flat_name for use in homedir path
RESPONDER: use proper context for getDomains()
Don't clear 'sssd_pam' env when built for intg-tests
ssh: do not use default_domain_suffix