Allow specifying signing algorithm of the IPA CA cert in ipa-server-install.
    
    This is especially useful for external CA install, as the algorithm is also
    used for the CSR signature.
    
    https://fedorahosted.org/freeipa/ticket/4447
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>