sssd seems to have a problem with self-signed certs, so we'll do the regular
type...