User Life Cycle: DNA scopes full SUFFIX
    
    In patch 0001-3, the DNA plugins configuration was changed to scope only 'cn=accounts,SUFFIX'
    This part of the fix was invalid as trust domain object (that need uid/gid allocation)
    are under 'cn=trust,SUFFIX'. Revert that part of the fix.
    Waiting on https://fedorahosted.org/389/ticket/47828, to exclude provisioning contains
    
    https://fedorahosted.org/freeipa/ticket/3813
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>