ba82363
Add a role for ipa clients and use it in Ipsilon Signed-off-by: Aurélien Bompard <aurelien@bompard.org>