Is it safe to nuke older log files? Some of our CA instances are on VMs which were only allocated a reasonable amount of space for just running FreeIPA, and this adds up fast. The ones on physical have space to spare for some time yet, but some day it would be an issue for them too.

Is there a "best" way to control this? I know I can meddle with the pki-tomcat config but I assume it's set to generate all this hilariously verbose logging by default for a reason (or perhaps it's just an oversight that FreeIPA doesn't set this to a sane production configuration?). Also, I don't want to make a change then have it reverted by FreeIPA later...