certprofile: reject config with multiple profileIds
    
    In certprofile-import if the config file contains two profileId
    directives with different values, with the first matching the
    profile ID CLI argument and the second differing, the profile gets
    imported under the second ID.  This leads to:
    
    - failure to enable the profile
    - failure to add the IPA "tracking" certprofile object
    - inability to delete the misnamed profile from Dogtag (via ipa CLI)
    
    To avert this scenario, detect and reject profile configurations
    where profileId is specified multiple times (whether or not the
    values differ).
    
    https://pagure.io/freeipa/issue/7503
    
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>