[SSSD] [sssd PR#985][+Waiting for review] ssh: improvements for ssh_use_certificate_matching_rules