[SSSD] [sssd PR#908][+Rejected] ifp: implement connection-wide access check