[freeipa PR#1405][opened] Enable ephemeral KRA requests

[tiran]

   URL: https://github.com/freeipa/freeipa/pull/1405
Author: tiran
 Title: #1405: Enable ephemeral KRA requests
Action: opened

PR body:
"""
@rcritten's PR #1116 rebased to latest master. I had to create a new PR because I
don't have permission to fix the merge conflict.

## original message
Enabling ephemeral KRA requests will reduce the amount of LDAP
write operations and improve overall performance.

https://pagure.io/freeipa/issue/6703

NOTE: I'm not 100% sure on the upgrade for existing instances. My logic is that tomcat
is always stopped and then within that block the CA (if any) will be updated. Given that
the KRA runs in the same service that is why I stuck that update code there. It worked in
my testing.
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1405/head:pr1405
git checkout pr1405

[freeipa PR#1405][closed] Enable ephemeral KRA requests

[tiran]

   URL: https://github.com/freeipa/freeipa/pull/1405
Author: tiran
 Title: #1405: Enable ephemeral KRA requests
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1405/head:pr1405
git checkout pr1405