[Freeipa-devel] [freeipa PR#804][comment] krb5: make sure KDC certificate is readable