ima-setup unconditionally does:

dnf install rpm-plugin-ima

At least on Satellite registered systems the dnf plugins talk to Satellite even if the package is already installed so it would be preferable to avoid unnecessary network operations and a slight delay in the script by checking e.g. with "rpm -q rpm-plugin-ima" if the dnf command is really needed or not.

Thanks.