Make sure nsds5ReplicaStripAttrs is set on agreements

Add nsds5ReplicaStripAttrs to the agreement LDAP entry before the agreement
is created.

https://fedorahosted.org/freeipa/ticket/3989

ipaserver/install/replication.py

@@ -627,6 +627,7 @@ class ReplicationManager(object):
         if iswinsync:
             self.setup_winsync_agmt(entry, win_subtree)
 
+        entry['nsds5ReplicaStripAttrs'] = [" ".join(STRIP_ATTRS)]
         a_conn.add_entry(entry)
 
         try:
@@ -639,8 +640,6 @@ class ReplicationManager(object):
             # that we will have to set the memberof fixup task
             self.need_memberof_fixup = True
 
-        entry['nsds5ReplicaStripAttrs'] = [" ".join(STRIP_ATTRS)]
-
         wait_for_entry(a_conn, entry)
 
     def needs_memberof_fixup(self):