Validate SELinux users in config-mod
    
    config-mod is capable of changing default SELinux user map order
    and a default SELinux user. Validate the new config values to
    prevent bogus default SELinux users to be assigned to IPA users.
    
    https://fedorahosted.org/freeipa/ticket/2993