URL:
https://github.com/freeipa/freeipa/pull/823
Title: #823: ipa-kdb: reload certificate mapping rules periodically
sumit-bose commented:
"""
@dkupka, the reload only happens during processing the PKINIT request if the rules are
older than 5 minutes. It is not a timed event which runs all the time every 5 minutes.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/823#issuecomment-305523652