This feature is really nice because there was often some discussion with customers regarding the former Two-way-trust (which was actually no real two-way-trust!!!). Here you can read more about new features in IPA in latest RHEL 7.2.