[SSSD] [sssd PR#949][comment] ssh: apply certificate matching rules