[Freeipa-users] Solve freeipa 'fragility' via orchestrated containers & whole-container upgrade?