Server install: do not use unchecked ip addr for ipa-ca record
    
    At the end of a server installation, the DNS records for
    ipa-ca.$DOMAIN are created/updated with the IP addresses of the
    new server.
    The current code resolves the IP addresses of the new server
    but doesn't check them. This can result in the addition of
    a link-local address to ipa-ca record.
    
    For each address, make sure that it's neither reserved nor a
    link-local address.
    
    Fixes: https://pagure.io/freeipa/issue/8810
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Francois Cami <fcami@redhat.com>