Remove extraneous AJP secret from server.xml on upgrades
    
    PKI 10.10 unconditionally added an upgrade script for the AJP
    connector which replaced the AJP secret regardless of tomcat
    version.  It replaced requiredSecret with secret. IPA expects
    the attribute by version so this could make the secrets out of
    date and/or have connectors with both secrets and different
    values.
    
    PKI commit e70373ab131aba810f318c1d917896392b49ff4b has since
    been reverted but there may be servers with both secrets still.
    On next IPA upgrade clean them up.
    
    Also allow re-writing ipa-pki-proxy.conf in case the secret
    changes to ensure they remain in sync.
    
    Fixes: https://pagure.io/freeipa/issue/9176
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>