renew_ca_cert: set peer trust on the KRA audit certificate
    
    The PKI audit certificates require that trusted peer (P) be
    set on the certificate. This is done already for the CA audit
    certificate. Also set this on the KRA audit certificate on
    renewal.
    
    https://pagure.io/freeipa/issue/9353
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>