Retrieve all cert profiles from the CA with --all

Normally IPA only returns the locally-stored certificate profiles.
In order for certmonger to request CA subsystem certificates using
cert_request we need the full set of profiles. Return them all
when --all is provided and the requesting user has permission.

Related: https://pagure.io/freeipa/issue/9738

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>
Reviewed-By: Thomas Woerner <twoerner@redhat.com>

ipapython/dogtag.py

@@ -63,6 +63,14 @@ INCLUDED_PROFILES = {
 
 DEFAULT_PROFILE = u'caIPAserviceCert'
 KDC_PROFILE = u'KDCs_PKINIT_Certs'
+OCSP_PROFILE = 'caOCSPCert'
+SUBSYSTEM_PROFILE = 'caSubsystemCert'
+AUDIT_PROFILE = 'caSignedLogCert'
+CACERT_PROFILE = 'caCACert'
+CASERVER_PROFILE = 'caServerCert'
+KRA_AUDIT_PROFILE = 'caAuditSigningCert'
+KRA_STORAGE_PROFILE = 'caStorageCert'
+KRA_TRANSPORT_PROFILE = 'caTransportCert'
 
 
 if six.PY3: