[Freeipa-users] HBAC rule for http service