[SSSD] [sssd PR#553][synchronized] Use p11_child to verify certificates for the ssh responder