Require sssd-ipa instead of sssd meta pkg
    
    The sssd meta package pulls in additional dependencies that are not
    required by IPA clients. Only depend on sssd-ipa.
    
    Also update SSSD to 1.16.3-2 with fixes with support for One-Way Trust
    authenticated by trust secret.
    
    See: https://bugzilla.redhat.com/show_bug.cgi?id=1345975
    See: https://pagure.io/freeipa/issue/7710
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>