[SSSD] [sssd PR#949][+Pushed] ssh: apply certificate matching rules