[SSSD] [sssd PR#252][comment] PAM: check matching certificates from all domains