Title: #314: RFC: privilege separation for ipa framework code
OK. I didn't notice `private_ccache()` removes the ccache even if it did not
create it. That's just stupid, but I guess we will have to live with it for now.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code