Cloned from upstream issue https://pagure.io/freeipa/issue/9603

ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check

https://github.com/freeipa/freeipa/blob/master/ipaserver/install/ca.py#L366

            hsm_validator(
                options.token_name, options.token_library_path,
                options.token_password)

https://github.com/freeipa/freeipa/blob/master/ipaserver/install/ca.py#L416 (only if replica_config is not None)

        if options.token_password_file:
            with open(options.token_password_file, "r") as fd:
                options.token_password = fd.readline().strip()

https://github.com/freeipa/freeipa/blob/master/ipaserver/install/kra.py#L61

if options.token_password_file:
    with open(options.token_password_file, "r") as fd:
        options.token_password = fd.readline().strip()

https:/https://github.com/freeipa/freeipa/blob/master/ipaserver/install/server/install.py#L733

if setup_ca:
    ca.install_check(False, None, options)
if options.setup_kra:
    kra.install_check(api, None, options)