[Freeipa-devel] [freeipa PR#841][opened] ipa-kdb: use canonical principal in certauth plugin