Run HSM validation as pkiuser to verify token permissions
    
    Run all commands as pkiuser when validating that the HSM token
    is available, that the token library path is correct and that
    the password can read keys. This will avoid issues where the
    initial validation is ok but the pkiuser is not granted read
    access to some part of the token. This is very possible
    when using softhsm2.
    
    Fixes: https://pagure.io/freeipa/issue/9626
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>