[Freeipa-users] Promote new CA master after failure?