Test that the KRA profiles can renewal its three certificates
    
    The KRA was previously configured with Internal CA profiles
    which did not work with the IPA RA.
    
    Use public, common profiles to manage renewal of the KRA
    subsystem certificates.
    
    https://pagure.io/freeipa/issue/8545
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>