[SSSD] [sssd PR#949][+Accepted] ssh: apply certificate matching rules