Allow ipa-ca-install to use the new promotion code
    
    This makes it possible to install a CA after-the-fact on a server
    that has been promoted (and has no replica file available).
    
    https://fedorahosted.org/freeipa/ticket/2888
    
    Signed-off-by: Simo Sorce <simo@redhat.com>
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>