ipa-migrate - improve suffix replacement
    
    When values are "normalized/converted" to a new domain the order in
    which the host/release/suffix are converted matters. Replacing the
    suffix first can lead to incorrect results, so convert the host/realm
    before converting the suffix
    
    Signed-off-by: Mark Reynolds <mreynolds@redhat.com>
    relates: https://pagure.io/freeipa/issue/9776
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>