[Freeipa-devel] [freeipa PR#5842][opened] [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server