[Freeipa-users] Read only service user to run "ipa dnszone-find --all" and "ipa dnsrecord-find $zone"