Add $REALM to variables supported by the managed permission updater
    
    This will allow converting password policy permissions
    
    Part of the work for: https://fedorahosted.org/freeipa/ticket/4346
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>