[SSSD] [sssd PR#553][comment] Use p11_child to verify certificates for the ssh responder