[SSSD] [sssd PR#985][+Ready to push] ssh: improvements for ssh_use_certificate_matching_rules