nsswitch: only define TALLOC_ZERO if needed