Better local user and group support for AADLoginForLinux
The AADLoginForLinux extension seems to have pam and nss components, but there are few issues regarding user and group management:
* First the way the users are added to the host isn't very well documented. After testing it looks like they're added on-demand, when a user signs in.
* The on-demand method, I see is probably a way to avoid scanning all of AAD for all users which I understand is an expensive op, but if you have a group of users you wish to maintain and resolve on the host, it seems the only way to do so, is prepopulate them with the aaduseradd command, or possibly generate, and distribute a consistant /etc/aadpasswd file.
* Last, though aad is in the groups line of nsswitch.conf, it seems there is no group resolution support in the nss module. It would be nice to be able to at least define some groups that are able to be resolved on the host to be resolved somehow.