Allow principal to be set during start-tracking
    
    It was previously silently dropped by start-tracking.
    
    This is handy in an IPA environment for tracking certificates
    that don't have the principal encoded into the certificate
    itself.
    
    https://pagure.io/certmonger/issue/127