Prevent changing protected group's name using --setattr
    
    The name of any protected group now cannot be changed by modifing
    the cn attribute using --setattr. Unit tests have been added to
    make sure there is no regression.
    
    https://fedorahosted.org/freeipa/ticket/3354