Code review comment for ~sergiodj/ubuntu/+source/sssd:merge-2.7.1-2-kinetic

> I talked to Andreas in private and we think that it should be fine to keep sssd-idp in universe
> for this cycle

Just reiterating this. Check out these upstream release notes about sssd-idp[1]:
"""
Added a new krb5 plugin idp and a new binary oidc_child which performs OAuth2 authentication against FreeIPA. This, however, can not be tested yet because this feature is still under development on the FreeIPA server side. Nevertheless, we have decided to include this in the release in order to enable the functionality on the clients immediately when the FreeIPA project delivers this feature without the need to update the clients.
"""

1. https://sssd.io/release-notes/sssd-2.7.0.html