add default access control when migrating trust objects
    
    It looks like for some cases we do not have proper set up keytab
    retrieval configuration in the old trusted domain object. This mostly
    affects two-way trust cases. In such cases, create default configuration
    as ipasam would have created when trust was established.
    
    Resolves: https://pagure.io/freeipa/issue/8067
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>