host permissions: Allow writing attributes needed for automatic enrollment
    
    - userclass
      added to existing Modify hosts permission
    - usercertificate, userpassword
      added to a new permissions
    
    https://fedorahosted.org/freeipa/ticket/4252
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>