DNSSEC CI tests
    
    Tests:
    * install master, replica, then instal DNSSEC on master
      * test if zone is signed (added on master)
      * test if zone is signed (added on replica)
    
    * install master with DNSSEC, then install replica
      * test if root zone is signed
      * add zone, verify signatures using our root zone
    
    https://fedorahosted.org/freeipa/ticket/4657
    
    Reviewed-By: Milan Kubik <mkubik@redhat.com>