Lookup ipa-ca record with NSS
    
    DNS data management now uses NSS's getaddrinfo() instead of direct DNS
    queries to resolve the ipa-ca record. This fixes missing ipa-ca records
    when the current hostname is not resolvable in DNS but has correct
    records in /etc/hosts.
    
    Reduce timeout to 15 seconds and tighten timeout loop.
    
    The changeset can speed up installation by almost 60 seconds.
    ipa-server-install without built-in DNS calls into DNS data management
    twice with a timeout of 30 seconds for each call.
    
    Fixes: https://pagure.io/freeipa/issue/8529
    Related: https://pagure.io/freeipa/issue/8521
    Related: https://pagure.io/freeipa/issue/8501
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>