[SSSD] [RFC] Smartcard authentication with PKINIT and local authentication