Find orphan automember rules
    
    If groups or hostgroups have been removed after automember rules have been
    created using them, then automember-rebuild, automember-add, host-add and
    more commands could fail.
    
    A new command has been added to the ipa tool:
    
      ipa automember-find-orphans --type={hostgroup,group} [--remove]
    
    This command retuns the list of orphan automember rules in the same way as
    automember-find. With the --remove option the orphan rules are also removed.
    
    The IPA API version has been increased and a test case has been added.
    
    Using ideas from a patch by: Rob Crittenden <rcritten@redhat.com>
    
    See: https://pagure.io/freeipa/issue/6476
    Signed-off-by: Thomas Woerner <twoerner@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>