[SSSD] [sssd PR#814][comment] certmap: allow missing KU in OpenSSL version