[Freeipa-devel] [freeipa PR#804][synchronized] krb5: make sure KDC certificate is readable