[SSSD] [RFC] Matching and Mapping Certificates