[SSSD] [sssd PR#5356][comment] krb5_child: Harden credentials validation code