[Freeipa-devel] [freeipa PR#4868][closed] ca-del: require CA to already be disabled