Title: #314: RFC: privilege separation for ipa framework code
Updated branch, hopefully lint will be happy.
While there I discovered dcerpc.py ws using the HTTP keytab, after discussing
with @abbra we decided to just remove such use for now and see later if we need
any changes. The use was rare and in the importnat cases we have already a
better option in the code.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code