[SSSD-users] smartcard authentication directly against AD (no IPA)?