Title: #4978: [Backport][ipa-4-8] CAless installation: set the perms on KDC cert file
This PR was opened automatically because PR #4974 was pushed to master and backport to
ipa-4-8 is required.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4978/head:pr4978
git checkout pr4978