winbind: check for allowed domains in winbindd_dual_pam_chauthtok()