add a new option --pam-windbind-workaround for a pam plugin to
work around pam_winbind unconditional username lowercasing