IPA does not prevent the deletion of the last admin making IPA tools unusable there should be a prompt when deleting certain objects

Issue

...in a world of genius, I deleted the IPA admin user. While I still do maintain control of the LDAP "cn=Directory Manager" ID, kerberos and IPA tools won't work without this ID. Why are we allowed to delete it / and/or how do we re-create it?

I've attempted to manually recreate it (or under a different ID giving it access to the admins group) but cannot get the auth magic to actually work even though the right info is in the userPassword field. Seems like deleting the admin user shouldn't be allowed for moments when someone like me has a retarded moment. :-)