Use hardening flags for ipa-optd.

https://fedorahosted.org/freeipa/ticket/4010
Own /usr/share/ipa/ui/js/ in the spec file.

https://fedorahosted.org/freeipa/ticket/4010
Revert "Remove mod_ssl port workaround."

This reverts commit 3a11044664341257a3929da2db1c493659515eec.

The required version of httpd is not available in Fedora 19.
Revert to using the workaround for the 3.3 branch.
Fix -Wformat-security warnings