nsswitch: Add try_authtok option to pam_winbind