ipa-replica-manage: Do not allow topology altering commands from DL 1
    
    With Domain Level 1 and above, the usage of ipa-replica-manage commands
    that alter the replica topology is deprecated. Following commands
    are prohibited:
    
    * connect
    * disconnect
    
    Upon executing any of these commands, users are pointed out to the
    ipa topologysegment-* replacements.
    
    Exception is creation/deletion of winsync agreement.
    
    Part of: https://fedorahosted.org/freeipa/ticket/4302
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>