ipa-server-upgrade always reconfigures certmonger to track PKI, DS, HTTP certs, even if certmonger configuration is already OK.

The code looks for existing certmonger tracking requests and compares them with the expected ones. The issue is that the criteria for the search are wrong. Because of that, it assumes that certmonger is not tracking the certs wiith the right options, stops tracking, reconfigures the helpers, starts tracking.