[SSSD] [sssd PR#5356][+Ready to push] krb5_child: Harden credentials validation code