Feature Request

[sequencer]

1. change group to roles, query multiple roles.
2. for each keycloak group, name should be role's name, and gid should be attribute nss_gid
3. user struct:

- login name: ${username}
- optional encrypted password: x
- numerical user ID: ${nss_uid}
- numerical group ID: ${nss_gid}
- user name or comment field: ${email}
- user home directory: ${nss_home orelse default home}
- optional user command interpreter: ${nss_shell orelse default shell}

4. shadow should be empty for each user
5. group

- group name: ${rolename}
- optional encrypted password: x
- numerical user ID: ${(optional read_from /etc/group) orelse nss_gid}

7. add client key
8. local cache