Request for enhancement

Lightweight CAs (sub-CAs) can be enabled and disabled via ipa ca-disable and ipa ca-enable commands. But the current enabled/disabled status cannot be seen in ipa ca-show or via other means.

There should be a way to see this, either via ca-show or via another command. It may be preferable to make it a separate command or an option of ca-show, rather than an unconditional behaviour of ca-show. This is because the status is stored in Dogtag, not IPA, so a round-trip to Dogtag is required.