[SSSD] [sssd PR#949][+Changes requested] ssh: apply certificate matching rules