Track lightweight CAs on replica installation
    
    Add Certmonger tracking requests for lightweight CAs on replica
    installation.  As part of this change, extract most of the
    lightweight CA tracking code out of ipa-certupdate and into
    cainstance.
    
    Fixes: https://fedorahosted.org/freeipa/ticket/6019
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>