[SSSD] [sssd PR#5762][synchronized] krb5: add support for oauth2 challenge (wip)