Try out anonymous PKINIT after it is configured
    
    After PKINIT certificate is requested and everything is set up, we
    should attempt to perform anonymous PKINIT and fail hard if it does not
    work for some reason.
    
    https://pagure.io/freeipa/issue/6739
    
    Reviewed-By: Martin Basti <mbasti@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>