[SSSD] Special HBAC rules