Introduce NSS database /etc/ipa/nssdb
    
    This is the new default NSS database for IPA.
    
    /etc/pki/nssdb is still maintained for backward compatibility.
    
    https://fedorahosted.org/freeipa/ticket/3259
    
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>