[SSSD] [PATCH] Use new schema for HBAC service checks