Add a trigger to avoid sabotaging older versions on downgrades
    
    - add a %%trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
      when we detect certmonger versions prior to 0.58 being installed, to
      avoid cases where some older versions choke on CAs with nicknames that
      contain characters that can't legally be part of a D-Bus name (#948993)