Stop dogtag when updating its configuration in ipa-upgradeconfig.
    
    Modifying CS.cfg when dogtag is running may (and does) result in corrupting
    this file.
    
    https://fedorahosted.org/freeipa/ticket/4569
    
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>