With new enough selinux-policy, setsebool httpd_dbus_sssd and enforcing should work.