Ever since from v4.5, FreeIPA expects at least some kind of anonymous PKINIT to work. The pkinit-anonymous command was supposed to enable/disable anonymous pkinit by locking/unlocking the anonymous principal. We can't allow this for FreeIPA to work so we are removing the command as it was never supported anyway. https://pagure.io/freeipa/issue/6936 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>