cert: fix CLI output of cert_remove_hold
    
    cert_remove_hold uses output params instead of exceptions to convey
    unsuccessful result. Move the output params to the client side before
    the command is fixed to use exceptions.
    
    https://fedorahosted.org/freeipa/ticket/4739
    
    Reviewed-By: David Kupka <dkupka@redhat.com>