[SSSD] [sssd PR#5265][synchronized] AD: Enforcing GPO rule restriction on user (backport to 1.16)