Title: #1011: py3: dnssec
This PR is a partial fix that should allow DNSSEC installation for master. Keys will not
be distributed to replicas. With my limited DNSSEC/IPA knowledge, I wasn't able to
verify the data stored in LDAP are actually correct. In case they are not, this would
prevent installation of DNSSEC replicas in the future.
Our DNSSEC tests are not passing, thus we can't use them to verify this PR. Given
these circumstances, I propose to officially discourage DNSSEC installation in 4.6.0.
This PR supersedes #898. For review, it is highly recommended to rebase on #999.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1011/head:pr1011
git checkout pr1011