upgrade: unconditional import of certificate profiles into LDAP
    
    During IPA server upgrade, the migration of Dogtag profiles into LDAP
    backend was bound to the update of CS.cfg which enabled the LDAP profile
    subsystem. If the subsequent profile migration failed, the subsequent
    upgrades were not executing the migration code leaving CA subsystem in
    broken state. Therefore the migration code path should be executed
    regardless of the status of the main Dogtag config file.
    
    https://fedorahosted.org/freeipa/ticket/5682
    
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>