The replicationdb password is an instance parameter and should
be created by the first subsystem in the instance. This should
happen independently of whether replication is being set up
in case it is needed to set up replication (as a master) later.
As IPA figured out when trying out setupReplication=False, failure
to set the replication password in the first subsystem
ends up breaking instance restart because of password checks on startup.
Please review,
Ade