IPA: Only generate kdcinfo files on clients
    
    In some cases, IPA masters end up having a broken SSSD configuration
    that also includes the SRV records. This can cause the kdcinfo files to
    point to a different master which uses a different PKINIT certificate
    which is only valid for that IPA master. This can result e.g. in webui
    not working.
    
    This patch prevents the kdcinfo files from being generated on the IPA
    masters, but keep generating them on the clients.
    
    Not generating kdcinfo files on masters has no negative performance
    impact, because libkrb5 is configured via krb5.conf to point to self
    anyway.
    
    Reviewed-by: Pavel Březina <pbrezina@redhat.com>