In FreeIPA 4.4.x, *config-show commands were not returning anything for empty server attributes (DNSSec key master, CA renewal master) and returned empty list when no server role such as CA, KRA was enabled in topology (or the requestor had not read privilege for the service entries).

In other plugin, however, if the optional attribute is not set or the requestor has no read access to it, it was not sent at all in the response. We should amend the behavior of this component to conform to intended semantics of output parameters.