Make ipausers a non-posix group on new installs
    
    https://fedorahosted.org/freeipa/ticket/2238
    
    It doesn't make a lot of sense for ipausers to be a posix group and
    we will save a few cycles in compat and sssd by making it non-posix.
    
    This is for new installs only.