[Freeipa-devel] [freeipa PR#841][+prioritized] ipa-kdb: use canonical principal in certauth plugin