install: request service certs after host keytab is set up
    
    The certmonger renew agent and restart scripts use host keytab for
    authentication. When they are executed during a certmonger request before
    the host keytab is set up, the authentication will fail.
    
    Make sure all certmonger requests in the installer are done after the host
    keytab is set up.
    
    https://pagure.io/freeipa/issue/6757
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>