Title: #506: added ssl verification
LGTM, but I want @simo5 to give the final ACK.
Since Custodia is only used during replica installation on an enrolled system,
ipa-client-install has already provided the certificate. I don't see any issue
in the proposed fix.
```ipaserver.secrets.client``` does not yet use Custodia's own client library.
I'll keep the problem in mind once we have updated to recent Custodia version.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code