v0.7.0

Typed escape hatch and core API: any FreeIPA command can be called with
typed decoding, truncated searches are reported, attributes can be changed
one at a time, several commands can run in one round trip, and calls for
features newer than the server fail early. Checked against real FreeIPA
4.9, 4.12 and 4.13 by the contract tests.

Added

• Call[T], a generic typed call for any FreeIPA command, and Entry, a
  result object with Has, Str, Strs, Bool, Int, Time, Bytes,
  DN and Raw accessors that read FreeIPA's attribute lists,
  __datetime__ and __base64__ values
• FindEntries(ctx, c, method, args, opts, sizelimit) and ErrTruncated:
  a *_find that reports a result truncated by the server's size limit
  instead of returning it silently
• ServerVersion and ErrNotSupported: passkey calls (FreeIPA 4.11) and
  SubIDFind/SubIDGenerate (4.9.7) fail before sending when the known
  server is older
• Modify(command, keys...): setattr/addattr/delattr updates of
  single attributes on any object, nested ones included
• Batch: several commands in one round trip with per-command results;
  BatchResult.Err is an error holding a bare *IpaError
• CodeConversion (3008), CodeObjectclassViolation (4205) and CodeOnlyOneValueAllowed (4207)
• ipatest: SetVersion, sizelimit truncation on user_find,
  group_find and host_find, setattr/addattr/delattr on user_mod
  and stageuser_mod (including OnlyOneValueAllowed), and batch