Do not add enabled user to activated group - clean up parse_acct_disable
    
    If a user needs to be enabled, just delete the user from the inactivated group,
    but do not add to the activated group.  If a user is in no group, the user is
    active by default.  IPA uses the activated group for override purposes.
    
    parse_acct_disable is only used when the config changes, but I cleaned it
    up anyway to make the code clearer.