Validate the HSM token library path and name during installation
    
    It would fail eventually with the output in the CA logs but it
    wasn't always very obvious and you had to wait a while to find
    out about a typo.
    
    Scraping modutil output is a bit ugly but it is guaranteed
    to be installed and this should work both with p11-kit and
    without.
    
    Related: https://pagure.io/freeipa/issue/9273
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>