1)
when IPA dns is not installed and option --updatedns is used, command should return warning (or error? -- be careful with backward compatibility)

2)
when proper DNS zone does not exist, 'host not found' error is raise instead of dnszone nto found

3)
dnszone-show does not guarantee that record exists, this check should be replaced by dnsrecord-show (that handles the case when zone does not exist)

4)
--updatedns help should explicitly describe that only sshfp record are updated.