[Freeipa-devel] [freeipa PR#5843][closed] [Backport][ipa-4-9] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server