Support delegating RBAC roles to service principals

https://fedorahosted.org/freeipa/ticket/3164

Reviewed-By: Martin Kosek <mkosek@redhat.com>
service: Normalize service principal in get_dn

This will make any lookup go through the normalization.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
webui: convert widget.less indentation to spaces

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
webui: improve rule table css

- category radio line has line-height large enough to contain
  undo button -> content doesn't move several pixels on change
- remove vertical padding from btns in table headers to maintain
  about the same height
- remove invisible border from link buttons to have the same height
  for disabled and enabled button

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
webui: sshkey widget - usability fixes

- save one click by opening edit dialog right after adding new row
- add margin between fingerprint and "show/edit" button
- fix honoring of writable/read-only flags upon row creation

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
webui: disable batch action buttons by default

action buttons associated with batch actions were enabled by default, but
they were disabled right after facet creation and a load of data. It caused
a visual flicker.

UX is enhanced by making them disabled by default.

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
webui: fix group type padding

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>