[SSSD] Design Discussion: Improving AD provider access control