[SSSD] [sssd PR#908][comment] ifp: implement connection-wide access check