[SSSD] [sssd PR#553][+superseded] Use p11_child to verify certificates for the ssh responder