Fix external CA installation
    
    When re-creating the CADS instance it needs to be more fully-populated
    so we have enough information to create an SSL certificate and move
    the principal to a real entry.
    
    https://fedorahosted.org/freeipa/ticket/1245