Always fetch forest info from root DCs when establishing one-way trust
    
    Prior To Windows Server 2012R2, the `netr_DsRGetForestTrustInformation` calls
    performed against non-root forest domain DCs were automatically routed to
    the root domain DCs to resolve trust topology information.
    
    This is no longer the case, so the `com.redhat.idm.trust-fetch-domains` oddjob
    helper used to establish one-way needs to explicitly contact root domain DCs
    even in the case when an external trust to non-root domain is requested.
    
    https://fedorahosted.org/freeipa/ticket/6057
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>