Question on Centrify express limitations

Hi,

I am new to Centrify. We are planning to implement the Centrify Express for the Oracle Linux servers. Our security team is asking the below questions. Can you please clarify the following?

1.) The following Centrify community link talks about enabling auto.schema.allow.(users, groups) in Centrify DirectExpress version 5.1. I think the latest version is 5.4.1. But the Centrify admin guide (page 10) says that we can not use the auto.schema.allow.(users, groups) parameters to filter user or group logins.  Does that mean an uncontrolled access to the Linux servers and anyone in the domain can login to the Linux servers?
Reference:

Community link: http://community.centrify.com/t5/Centrify-Express/sudo-hanging-for-a-long-while-for-centrify-enabled-users/td-p/10166/page/3

Admin guide: https://docs.centrify.com/en/css/suite2017/centrify-express-unix-agent-guide.pdf?_ga=2.170280871.628020187.1503384383-1610122130.1503384383

2.) We have Quest InTrust Real-time Alert for the SOX audit of critical servers. Will there be any conflict between Centrify Express and Quest InTrust Real-time Alert? (I am assuming Centrify is a bridge to Active Directory and won't cause any issue with InTrust).

Thanks,

Prabu