Support certificate login after installation and upgrade
    
    Add necessary steps which set SSSD and set SELinux boolean during
    installation or upgrade. Also create new endpoint in apache for
    login using certificates.
    
    https://pagure.io/freeipa/issue/6225
    
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
    Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
    Reviewed-By: David Kupka <dkupka@redhat.com>