Workaround for pyasn1 0.4
    
    pyasn1 0.4 changed handling of ANY containers in a backwards
    incompatible way. For 0.3.x, keep explicit wrap and unwrap in octet
    strings for ANY container members. For >= 0.4, let pyasn1 do the job.
    
    This patch also makes sorting of extended_key_usage_bytes() stable and
    adds tests.
    
    Tested with pyasn1 0.3.7 and 0.4.4.
    
    Fixes: https://pagure.io/freeipa/issue/7685
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>