[opensuse] limiting users who can use su