Since the ipaservers group controls the ability of the host to promote itself to IPA replica, it is important that admins don't just play with that group, adding machines there at random.

It'd be good to have big note on the WebUI when adding a host to this host groups, warning about the security implication of such group membership.

Not sure how easy would be to make similar note/warning on CLI.