adtrust: print DNS records for external DNS case after role is enabled
    
    We cannot gather information about required DNS records before "ADTrust
    Controller" role is enabled on this server. As result, we need to call
    the step to add DNS records after the role was enabled.
    
    Fixes: https://pagure.io/freeipa/issue/8192
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>