Request PKINIT cert directly from Dogtag API on first master
    
    On the first master the framework may not be fully functional to server
    certificate requests. It is safer to configure helper that contacts
    Dogtag REST API directly.
    
    https://pagure.io/freeipa/issue/6739
    
    Reviewed-By: Martin Basti <mbasti@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>