Add hidden replica feature
    
    A hidden replica is a replica that does not advertise its services via
    DNS SRV records, ipa-ca DNS entry, or LDAP. Clients do not auto-select a
    hidden replica, but are still free to explicitly connect to it.
    
    Fixes: https://pagure.io/freeipa/issue/7892
    Co-authored-by: Francois Cami <fcami@redhat.com>:
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Thomas Woerner <twoerner@redhat.com>
    Reviewed-By: Francois Cami <fcami@redhat.com>