User-defined certificate subjects
    
    Let the user, upon installation, set the certificate subject base
    for the dogtag CA. Certificate requests will automatically be given
    this subject base, regardless of what is in the CSR.
    
    The selfsign plugin does not currently support this dynamic name
    re-assignment and will reject any incoming requests that don't
    conform to the subject base.
    
    The certificate subject base is stored in cn=ipaconfig but it does
    NOT dynamically update the configuration, for dogtag at least. The
    file /var/lib/pki-ca/profiles/ca/caIPAserviceCert.cfg would need to
    be updated and pki-cad restarted.