Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
It seems to work fine for "mod_nss" reinstalls but `ipa-server-upgrade` is
currently failing so I can't confirm that's ok.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code