Split CA replica installation steps for domain level 0
    
    Installation from replica file is broken because lightweight CA
    replication setup is attempted before Kerberos is set up.  To fix
    the issue, explicitly execute step 1 before Kerberos setup, and
    step 2 afterwards.
    
    Part of: https://fedorahosted.org/freeipa/ticket/5963
    
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>