ipa-tests: add a test to make sure MS-PAC is produced by KDC
    
    When ipa-adtrust-install is used, IPA KDC will be configured to issue
    tickets with MS-PAC record in them for users and services that have
    ipaNTSecurityIdentifier (SID) attribute in the LDAP record.
    
    Test that a newly added user can kinit and obtain a ticket that has
    a PAC structure.
    
    Test that a service can impersonate a user and the resulting S4U2Self
    requested service ticket also has PAC structure.
    
    Related: https://pagure.io/freeipa/issue/8319
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Isaac Boukris <iboukris@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>