custodia: Make sure container is created with first custodia replica
    
    If a first 4.3+ replica is installed in the domain, the custodia
    container does not exist. Make sure it is created to avoid failures
    during key generation.
    
    https://fedorahosted.org/freeipa/ticket/5474
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>