Enforce class rules when query=True, continue to not run validators.
    
    This started as a problem in allowing leading/trailing whitespaces
    on primary keys. In nearly every command other than add query is True
    so all rules were ignored on the primary key. This meant that to
    enforce whitespace we would need to define a validator for each one.
    
    I decided instead to set self.all_rules to just the class rules if
    query == True. So the minimum set of validators will be executed
    against each type but param-specific validators will only run on add.
    
    https://fedorahosted.org/freeipa/ticket/1285
    https://fedorahosted.org/freeipa/ticket/1286
    https://fedorahosted.org/freeipa/ticket/1287