freeipa.spec.in: update dependencies to 389-ds and selinux-policy
    
    389-ds-base 1.3.2.16 implements reordering of sub-plugins based on the
    ordering of the main plugin. We need it to make OTP working over
    compat tree.
    
    selinux-polic 3.12.1-135 fixes issues which prevented httpd to work
    with kernel keyring-based credentials caches.
    
    This change is Fedora 20+.
    
    Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>