Add delete option to ipa-cacert-manage to remove CA certificates
    
    Before removing a CA re-verify all the other CAs to ensure that
    the chain is not broken. Provide a force option to handle cases
    where the CA is expired or verification fails for some other
    reason, or you really just want them gone.
    
    https://pagure.io/freeipa/issue/8124
    
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>