Add ACI to allow hosts to add their own services
    
    Use wildcards and DN matching in an ACI to allow a host
    that binds using GSSAPI to add a service for itself.
    
    Set required version of 389-ds-base to 1.3.4.0 GA.
    
    https://fedorahosted.org/freeipa/ticket/4567
    
    Reviewed-By: Martin Basti <mbasti@redhat.com>