Properly scope shared variable spaces

• Supersede enforced configuration of kerberized NFS servers using (non-shared) special host groups.
• Scope REALM and smb_domain variables to their respective roles. They can be automatically generated anyway.