Remove default from the ipapermlocation option

The value from my machine ended up wired into API.txt,
so builds on other machines would fail.

Correct the mistake.
Convert remaining backend code to LDAPEntry API.
permission_find: Do not fail for ipasearchrecordslimit=-1

ipasearchrecordslimit can be -1, which means unlimited.
The permission_find post_callback failed in this case in legacy
permission handling.
Do not fail in this case.
Add OTP support to ipalib CLI

https://fedorahosted.org/freeipa/ticket/3368
Prevent garbage from readline on standard output of dogtag-ipa-retrieve-agent.

https://fedorahosted.org/freeipa/ticket/4064
Fix incorrect path in error message on sysrestore failure

On sysrestore failure, user is prompted out to remove the sysrestore
file. However, the path to the sysrestore file mentioned in the
sentence is not correct.

https://fedorahosted.org/freeipa/ticket/4080