This is broken because it requires restarting applications to see new NSS modules. The proper way to handle NSS modules is through nscd. See commit 554ae990.