Currently the task of setting up Smart Card authentication against FreeIPA KDC and WebUI require a number of non-trivial manual tasks (e.g. enabling OCSP, configuring PKINIT etc.). As an Administrator I want to be able to set up the feature by running one or more CLI scripts which will:

a) check whether the environment is ready to support the feature
b) if yes, configure the individual components without any human intervention
c) if the required components were already configured, do nothing but report success anyway

The last point is important for re-use of these tools in configuration managers like Chef, Ansible etc.