Small fixes for consistency.
Create an exported fact that identifies the first (master) IPA host.

This is needed to be able to work around limitations in FreeIPA such as:
* "A selfsign CA backend can only prepare on the original master"