Use hardening flags for ipa-optd.

https://fedorahosted.org/freeipa/ticket/4010
Own /usr/share/ipa/ui/js/ in the spec file.

https://fedorahosted.org/freeipa/ticket/4010
Changed CLI to allow to use FILE as optional param
migrate-ds added --ca-cert-file=FILE option

FILE is used to specify CA certificate for DS connection when TLS is
required (ldaps://...).

Ticket: https://fedorahosted.org/freeipa/ticket/3243
Add RADIUS proxy support to ipalib CLI

https://fedorahosted.org/freeipa/ticket/3368
Add tests for the radiusproxy plugin
Clarify error message about IPv6 socket creation in ipa-cldap plugin

https://fedorahosted.org/freeipa/ticket/4056