[CentOS] restricting access to an NIS netgroup