harden the check for trust namespace overlap in new principals
    
    This check must handle the possibility of optional attributes
    (ipantadditionalsuffixes and ipantflatname) missing in the trusted domain
    entry.
    
    https://fedorahosted.org/freeipa/ticket/6099
    
    Reviewed-By: David Kupka <dkupka@redhat.com>