DNS: detect when OpenSSL engine should be removed on upgrade
    
    For OpenSSL Provider API use we don't need 'named -E engine-name'
    anymore, it has to be removed. The removal process is slightly
    complicated because we need to detect '-E engine-name' and compare it
    with the engine we know about (pkcs11) but if we are upgrading to the
    build that supports OpenSSL Provider API, we don't know the engine name
    anymore.
    
    Fixes: https://pagure.io/freeipa/issue/9696
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>