[SSSD] [sssd PR#949][-Accepted] ssh: apply certificate matching rules