URL:
https://github.com/SSSD/sssd/pull/553
Title: #553: Use p11_child to verify certificates for the ssh responder
sumit-bose commented:
"""
The latest version fixes the Coverity issue Jakub found above.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/553#issuecomment-383503355