Add --dirman-password option to ipa-server-certinstall.

https://fedorahosted.org/freeipa/ticket/3869
Fix ipa-server-certinstall usage string.

https://fedorahosted.org/freeipa/ticket/3869
pwd-plugin: Fix ignored return error

CoverityID: 11904

Also remove 'inline', the compiler can do it on its own if needed.

Fixes:
https://fedorahosted.org/freeipa/ticket/3882
kdb-mspac: Fix out of bounds memset

This memset was harmless as the following data is then set again, but an
optimizing compiler might conceivably reorder instructions causing issues.

CoverityID: 11909

Fixes:
https://fedorahosted.org/freeipa/ticket/3883
kdb-princ: Fix memory leak

If we do not store the keys in the entry we need to free the array before
continuing or the data is leaked.

CoverityID: 11910

Fixes:
https://fedorahosted.org/freeipa/ticket/3884
Update idrange search facet after trust creation

Adding a trust creates a range -> range search facet should be marked as expired.

https://fedorahosted.org/freeipa/ticket/3874
Add missing license header to ipa-test-config