[SSSD] [sssd PR#985][comment] ssh: improvements for ssh_use_certificate_matching_rules