The path to ipa-pki-retrieve-key was hard-coded, which broke replication of light weight sub CA keys. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>