[SSSD] Design discussion: Pin an AD client to a particular AD site