[SSSD] [PATCH] Keep deref controls until the whole request is finished