[Freeipa-users] add replication segment for CA