adtrustinstance: Use normalized DNS records for default first site

Due to the recent changes of DNS validation, the framework no longer
allows addition of DNS records that contain upper-cased characters.

Change the AD-specific records we add that contain upper-cased
characters to their respective lower cased versions.

https://fedorahosted.org/freeipa/ticket/4382
permission_fixes