Set "KDC:Disable Last Success" by default
    
    In big deployments enabled recording of the last sucesfull login
    this creates a huge changelog on DS side and cause performance
    issues even if this is excluded from replication.
    
    Actually this is not used directly by FreeIPA so it is safe to remove
    in new installations. User who need this must manually remove
    "KDC:Disable Last Success" using `ipa config-mod` command or WebUI.
    
    https://pagure.io/freeipa/issue/5313
    
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>