[SSSD] [sssd PR#949][-Ready to push] ssh: apply certificate matching rules