Title: #574: ipa-replica-prepare fix
Actually, this is most probably a privilege-separation issue since "kdc.pem"
which we try to read here does not exist ever since.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code