Well done on this module. I'm currently utilizing this for a script that finds hostnames and the corresponding users that have access. The challenge I am having is that this module does not currently support hbacrule-show and hbacrule-find like the ipa client does natively. Any timeline for adding them?