ipa-client-automount should not configure nsswitch.conf manually

https://fedorahosted.org/freeipa/ticket/3733

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Replace "replica admins read access" ACI with a permission

Add a 'Read Replication Agreements' permission to replace
the read ACI for cn=config.

https://fedorahosted.org/freeipa/ticket/3829

Reviewed-By: Martin Kosek <mkosek@redhat.com>
ipaplatform: Create separate module for platform files

https://fedorahosted.org/freeipa/ticket/4052
ipaplatform: Move service base platfrom related functionality to ipaplatform/base/service.py
ipaplatform: Move default implementations of tasks from service.py.in
ipaplatform: Create default implementations for tasks that were missing them
ipaplatform: Add base fedora platform module
ipaplatform: Moved Fedora 16 service implementations and refactored them as base Fedora module service implementations
ipaplatform: Move restore_context and check_selinux_status implementations to base fedora platform tasks
ipaplatform: Do not require custom Authconfig implementations from platform modules
ipaplatform: Remove legacy redhat platform module
ipaplatform: Move Fedora-specific implementations of tasks to fedora base platform file
ipaplatform: Add hooks that link to specific platform module
ipaplatform: Change platform dependant code in freeipa to use ipaplatform tasks
ipaplatform: Change service code in freeipa to use ipaplatform services
ipaplatform: Change paths dependant on ipaservices to use ipaplatform.paths
ipaplatform: Remove redundant imports of ipaservices