Description of problem:
This is just an RFE. It's happening at customer sites that the cleaning of dns
records at "ipa-replica-manage del" is happening more or less at the end of
command, just after the "CLEANALLRUV" operatoin which is rather delicate and
could hang easily if not all the replicas are up and running. Customers tends
to ctrl+C as porposed and the last cleaning is not done.
As a consquence plenty of references to deleted replicas stays in dns zones and
records.
It could be interesting to have a command to clean this. For instance, to
replace the "Authoritative nameserver" of zones by an existing node.
This can be done by:
 ipa dnszone-mod <zone name> --name-server=<fqdn ipaserver>
for all the zones poiting to a deleted replica.
Then, for dnsrecords, we have these sort of info:
Record name: @
  NS record: <node1>. <node2>. <node3>.
and the command to do manually (or webui) is:
ipa dnsrecord-mod  <zone> <record> --ns-rec="(list of valid nodes only)"