Update to upstream 3.2.2
    
    - Drop freeipa-server-selinux subpackage
    - Drop redundant directory /var/cache/ipa/sessions
    - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost
    - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency
      issues when there are still old parts of software (like entitlements plugin)