client install: finalize API after CA certs are available
    
    This is required for the finalize call to be able connect to the server to
    retrieve API schema.
    
    https://fedorahosted.org/freeipa/ticket/4739
    
    Reviewed-By: David Kupka <dkupka@redhat.com>