User Life Cycle: create containers and scoping DS plugins
    
    User Life Cycle is designed http://www.freeipa.org/page/V4/User_Life-Cycle_Management
    It manages 3 containers (Staging, Active, Delete). At install/upgrade Delete and Staging
    containers needs to be created.
    		Active: cn=users,cn=accounts,$SUFFIX
    		Delete: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
    		Stage:  cn=staged users ,cn=accounts,cn=provisioning,$SUFFIX
    
    Plugins scopes:
    		krbPrincipalName, krbCanonicalName, ipaUniqueID, uid:
    			cn=accounts,SUFFIX
    			cn=deleted users,cn=accounts,cn=provisioning,SUFFIX
    		DNA:
    			cn=accounts,SUFFIX
    
    		Plugins exclude subtree:
    		IPA UUID, Referential Integrity, memberOf:
    			cn=provisioning,SUFFIX
    
    https://fedorahosted.org/freeipa/ticket/3813
    
    Reviewed-By: Petr Viktorin <pviktori@redhat.com>