Add several managed read permissions under cn=etc
    
    This adds permissions to:
    - cn=masters,cn=ipa (with new privilege)
    - cn=dna,cn=ipa (authenticated users)
    - cn=ca_renewal,cn=ipa (authenticated users)
    - cn=CAcert,cn=ipa (anonymous)
    - cn=replication (authenticated users)
    - cn=ad (authenticated users)
    
    Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>