ipa-kra-install must create directory if it does not exist
    
    ipa-kra-install creates an admin cert file in
    /root/.dogtag/pki-tomcat/ca_admin.cert but does not check that the
    parent directory exists. This situation can happen when uninstall + restore
    has been run.
    
    The fix creates the directory if not present.
    
    https://fedorahosted.org/freeipa/ticket/6606
    
    Reviewed-By: Christian Heimes <cheimes@redhat.com>