tests: fix cleanup for CATracker
    
    With ca-del now requiring disablement first, CATracker cleanup fails
    because the CA is not yet disabled.  Implement auto disable before
    delete in CATracker, with an option to suppress.  This suppress
    option is used when testing the "disable first" option.
    
    The patch also includes a tweak to EnableTracker cleanup.  In case
    the CA already got deleted (and in the case of CATracker, also
    disabled), this avoids an attempt to re-enable the already-deleted
    object.
    
    Part of: https://fedorahosted.org/freeipa/ticket/5011
    
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>