[Freeipa-users] Re: reduce "normal user" permission