[Freeipa-users] What's the proper way of creating HBAC/SUDO rules in a Primary/replica setup