passwd:     files winbind systemd    {exclude if "with-custom-passwd"}
group:      files winbind systemd    {exclude if "with-custom-group"}