ssh: add option ssh_use_certificate_matching_rules
Add a new option ssh_use_certificate_matching_rules to select the
matching rules which should be used to filter the certificates to derive
ssh keys.
Related to https://pagure.io/SSSD/sssd/issue/4121
Reviewed-by: Tomáš Halman <thalman@redhat.com>