pam: use pam_initgroups_scheme
The new pam_initgroups_scheme option is used to control how the PAM
responder is refreshing the group membership data of the user.
Resolves: https://pagure.io/SSSD/sssd/issue/4098
Reviewed-by: Pavel Březina <pbrezina@redhat.com>