[SSSD] [sssd PR#949][opened] ssh: apply certificate matching rules