Don't change the CA profile when modifying request in ipa_certupdate
    
    The CA tracking request is modified (it calls renew but it doesn't
    actually do a renewal) as part of ipa-certupdate and it dropped
    the profile. ipa-healthcheck discovered this condition.
    
    https://pagure.io/freeipa/issue/8644
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>