Title: #413: Complete stageuser API
I've removed the first commit, thank you for noticing, I've probably just
rebased on branch containing it and then forget to remove it.
There's no ticket for handling missing SAN in ipalib.x509 because i just
uncovered newspaper when I replaced the certificates in our test and it was
easier to just fix it than reproducing and reporting it.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code