This should be integrated into the linux idmap/gss daemon
