ipa-ods-enforcer: stop must also stop the socket
    
    ipa-ods-enforcer is a socket-activated service. In order to fully stop
    the service, IPA needs to call
    systemctl stop ipa-ods-enforcer.service ipa-ods-enforcer.socket
    otherwise the socket remains active (listening) and can restart the
    service.
    
    A consequence of the issue is the backup / uninstall / restore
    scenario that is failing to sign the zones. The uninstaller removes
    the socket /run/opendnssec/engine.sock but leaves the ipa-ods-enforcer.socket
    active. A subsequent restore or install will not re-create the socket.
    
    Fixes: https://pagure.io/freeipa/issue/9613
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>