After an HSM replica install ensure all certs are visible
    
    If a certificate on a token does not have NSS trust set then
    it won't be visible in the softoken. This can be disconcerting
    for those used to seeing all the certificates.
    
    Loop through the possibilities and set no trust (or Peer) for
    all the certificates on the token.
    
    Also ensure that the CA certificate has the correct nickname.
    
    Related: https://pagure.io/freeipa/issue/9273
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>