Allow user to specify the ipa server realm

We automatically determine the ipa realm. This allows the customer to override the default.

- this adds to the cli and appliance_console
- realm is also passed to ssl certificates
- better display of error messages

outstanding: add bugzilla link

/cc @abellotti @dajohnso 
that is intentional - because when someone adds another parameter, they need to change the previous line and the next line.

with a trailing comma, then they can just add the line they want
(kinda like always adding trailing `;` in css when not needed)