ipa_pwd_extop: do not generate NT hashes in FIPS mode
    
    In FIPS mode NT hashes (aka md4) are not allowed. If FIPS more is
    detected we disable NT hashes even is the are allowed by IPA
    configuration.
    
    Resolves https://pagure.io/freeipa/issue/7026
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>