etc/ipa
etc/pki/nssdb
var/lib/ipa-client/sysrestore