Update certmap.conf on IPA upgrades
    
    This brings /etc/dirsrv/slapd-REALM/certmap.conf under IPA control.
    The file is overwritten on upgrades.
    
    This ensures that the cert for the ipaca user is recognized when
    ipa-ca-install is run on older masters.