Fix duplicate OIDs
    
    Apparently we forgot to check OID consistency between the schema and the
    extensions, and we got duplicates.
    
    Technically the schema was done later but it is easier to change the extensions
    OIDs than to change the schema of current beta2/rc1 installations.
    
    The only side effect is that older ipa-getkeytab and ipa-join binaries will
    fail. So all the admin/client tools must be upgraded at the same time as well
    as all the masters (otherwise some will show/accept the new OID while others
    won't).
    
    Fixes: https://fedorahosted.org/freeipa/ticket/976