François Cami

@csutherl @cipherboy if you want us to temporarily change the JRE stanza in ```/usr/share/pki/server/conf/tomcat.conf``` from: ``` JAVA_OPTS="-Dcom.redhat.fips=false" ``` to: ``` JAVA_OPTS="-Dcom.redhat.fips=false -Djava.security.debug=access:failure" ``` Let me know.

On it.

LGTM.

As a summary of the existing discussion: the check seems right, but can be long running. There is also no reason to launch that long-running test on all replica where...