5025204
trusts: add ACIs to allow AD trust agents to fetch cross-realm keytabs Part of https://fedorahosted.org/freeipa/ticket/4959 Reviewed-By: Tomas Babej <tbabej@redhat.com>