Get the certificate from freeIPA

These commands extracts the host certificate and key and the IPA CA certificate from nssdb. This is required when using ccm-fetch over SSL with a non-kerberos apache webserver. 
make a tempdir under `/tmp`, and set it's permissions to `700` before trying to extract the key. in case anything fails, any leftovers are under the protected directory