Title: #617: Allow renaming of sudo and HBAC rules
I like the `allow_rename` attribute, as it really explains what is happaning,
Also I like the reworked check if primary key is in DN because original
`self.obj.primary_key.name in entry_attrs` may return false positive results.
I'm afraid about one thing. This will basically break custom user plugins if
they used `rdn_is_private_key`. Shall we do some backward compatibility magic?
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code