[Freeipa-devel] [freeipa PR#5411][closed] Remove virtual attributes before rolling back a permission