[Freeipa-devel] [freeipa PR#5908][opened] Use new method in check to prevent removal of last KRA