Restrict admins group modifications
    
    Group-mod command no longer allows --rename and/or --external
    changes made to the admins group. In such cases, ProtectedEntryError
    is being raised.
    
    https://fedorahosted.org/freeipa/ticket/3098