etc/ipa
etc/ipa/nssdb
etc/krb5.conf.d
etc/pki/nssdb
var/lib/ipa-client/pki
var/lib/ipa-client/sysrestore