Generate syntethic MS-PAC for all services running on IPA master
    
    MS-PAC is required to be present in TGT if one wants to connect to
    AD services using this TGT. Users get MS-PAC by default, SSSD in
    ipa_server_mode uses host/fqdn@REALM principal to talk to AD LDAP.
    
    This patch enables other services running on IPA master to connect
    to AD services. This is required for IPA python code doing discovery
    of remote AD domain settings shortly after IPA-AD trust has been
    established.