[SSSD] Re: [RFC] Matching and Mapping Certificates