replica install: fix DS restart failure during replica promotion
    
    Since commit 0914a3aeb778986dea4020ddf8ca550ebef02bad, ipa config file is
    created before DS certificate is requested, which makes certmonger request
    the certificate from the local system rather than the remote master. This
    causes the request to fail, as local httpd is not yet configured at the
    time of the request.
    
    Move ipa config file creation to its original place to fix the issue.
    
    https://fedorahosted.org/freeipa/ticket/6392
    
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>