Integrate ipa_custodia policy
    
    ipa-custodia is an internal service for IPA. The upstream SELinux policy
    has a separate module for ipa_custodia. Fold the current policy from
    Fedora rawhide into ipa's SELinux policy.
    
    Related: https://pagure.io/freeipa/issue/6891
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>