pki: backup previous ca when creating new one

Change-Id: Ie4111dee70ea746dbb481d0a7597898ad51ec13d
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>