Create ipa-otp-counter 389DS plugin
    
    This plugin ensures that all counter/watermark operations are atomic
    and never decrement. Also, deletion is not permitted.
    
    Because this plugin also ensures internal operations behave properly,
    this also gives ipa-pwd-extop the appropriate behavior for OTP
    authentication.
    
    https://fedorahosted.org/freeipa/ticket/4493
    https://fedorahosted.org/freeipa/ticket/4494
    
    Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
    Reviewed-By: Martin Kosek <mkosek@redhat.com>