Reorder privileges so that memberof for permissions are generated properly.
    
    The privilege was added after the permission causing the memberof to not
    be generated.
    
    Add a new task to regenerate memberof for existing PBAC to fix upgrades.
    
    https://fedorahosted.org/freeipa/ticket/2058
    https://fedorahosted.org/freeipa/ticket/2059
    https://fedorahosted.org/freeipa/ticket/2060
    https://fedorahosted.org/freeipa/ticket/2061