Wipe the ipa-ca DNS record when updating system records
    
    If a server with a CA has been marked as hidden and
    contains the last A or AAAA address then that address
    would remain in the ipa-ca entry.
    
    This is because update-dns-system-records did not delete
    values, it just re-computed them. So if no A or AAAA
    records were found then the existing value was left.
    
    Fixes: https://pagure.io/freeipa/issue/9195
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Francisco Trivino <ftrivino@redhat.com>
    Reviewed-By: Stanislav Levin <slev@altlinux.org>