Fix CA-less to CA-full upgrade
    
    CertDB would have always created a directory on initialization. This
    behavior changes here by replacing the truncate argument with create
    which will only create the database when really required.
    
    https://pagure.io/freeipa/issue/6853
    
    Reviewed-By: Tomas Krizek <tkrizek@redhat.com>