[Freeipa-users] Possible to remove trust controller role?