Disallow removal of dogtag and ipa-dnskeysyncd services on IPA servers
    
    Also removes dogtagldap from unremovable services
    
    Fixes: https://pagure.io/freeipa/issue/9764
    Signed-off-by: David Hanina <dhanina@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>