[Freeipa-devel] Re: authconfig replacement design