Comment 3 for bug 1564981

actually, another plan would be to disable just freeipa-server-dns from the new version.. that would avoid needing pkcs11 in bind9 but still being able to upgrade current servers, though I'm not sure what happens if someone has enabled dns before :/