Create user private groups with a uniqueid.

If we don't then we need to add it when a group is detached causing
aci issues.

I had to move where we create the UPG template until after the DS
restart so the schema is available.

ticket 542

ipalib/plugins/group.py

@@ -272,7 +272,7 @@ class group_remove_member(LDAPRemoveMember):
 api.register(group_remove_member)
 
 
-class group_detach(LDAPRemoveMember):
+class group_detach(LDAPQuery):
     """
     Detach a managed group from a user
     """