check for replica's KDC entry on master before requesting PKINIT cert
    
    This prevents replication-based race conditions to break PKINIT
    certificate requests on replica installation.
    
    https://pagure.io/freeipa/issue/6739
    
    Reviewed-By: Martin Basti <mbasti@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>