I just bumped into this as well. I think I've tried every permutation of commands+options, but I'm getting the "invalid 'PKINIT enabled server': all masters must have IPA master role enabled" message as well when running "ipa-replica-manage del --force -c <REDACTED>". Any ideas on how to resolve this?