Title: #567: Configure KDC to use certs after they are deployed
@simo5 actually I found multiple issues during review and concluded that
setting up PKINIT on DL1 replica never worked correctly actually. Will open
respective blocker tickets ASAP.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code