[SSSD] [sssd PR#5265][comment] AD: Enforcing GPO rule restriction on user (backport to 1.16)