Ensure IPA is running (ideally) before uninstalling the KRA
    
    The KRA attempts to unregister itself from the security domain
    which requires that IPA be running for this to succeed.
    
    1. Move the KRA uninstall call prior to stopping all IPA
       services
    2. Try to start IPA if it isn't running and a KRA is configured
    
    It isn't mandatory that IPA be running for the KRA uninstall to
    succeed but it will suppress a pretty scary backtrace and error
    message.
    
    https://pagure.io/freeipa/issue/8550
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>