[SSSD] [sssd PR#985][+Pushed] ssh: improvements for ssh_use_certificate_matching_rules