API for retrieval of master's PKINIT status and publishing it in LDAP
    
    An API was provided to report whether PKINIT is enabled for clients or
    not. If yes, the pkinitEnabled value will be added to the
    ipaConfigString attribute of master's KDC entry.
    
    See http://www.freeipa.org/page/V4/Kerberos_PKINIT#Configuration for
    more details.
    
    https://pagure.io/freeipa/issue/6830
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    Reviewed-By: Martin Basti <mbasti@redhat.com>
    Reviewed-By: Simo Sorce <ssorce@redhat.com>