Title: #5842: [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a
pre-PKINIT IPA CA server
This PR was opened automatically because PR #5832 was pushed to master and backport to
ipa-4-6 is required.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5842/head:pr5842
git checkout pr5842