Allow Apache to answer to ipa-ca requests without a redirect
    
    Any request other than the FQDN is redirected with a permanent
    move (301). Allowing ipa-ca as a valid name saves a round-trip.
    
    This is only allowed on /ca, /kra, /pki, /acme and /ipa/crl.
    
    https://pagure.io/freeipa/issue/8595
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>