Upgrade: fix trusts objectclass violationi
    
    Execute updates in proper ordering.
    Curently ldap-updater implementation doesnt allow better fix.
    
    Ticket: https://fedorahosted.org/freeipa/ticket/4680
    Reviewed-By: David Kupka <dkupka@redhat.com>