Please review.  I tested using an RA.  When I updated NSS, user
enrollments failed with a failure to parse the sslget response.  When I
added my patch, everything succeeded once again. I tested on F15.
Matt, if approved, please apply to all the relevant branches.  Also, as
a final test - perhaps ask Alexander (irc ab) to test using an IPA
install to confirm that it works for him.
Thanks,
Ade