[WIP] allow user to specify the ipa server realm

We automatically determine the ipa realm. This allows the customer to override the default.

- this adds to the cli and appliance_console
- realm is also passed to ssl certificates
- better display of error messages

awaiting: confirmation from Alberto, final testing, a bugzilla ticket.

/cc @abellotti @dajohnso