Prompt for token password if not provided in replica/ipa-ca-install
    
    If the password wasn't provided by --token-password then an empty
    value would be passed into the CA installer which promptly failed.
    
    Related: https://pagure.io/freeipa/issue/9273
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>