certmonger service fails to automatically renew IdM subsystem certificates due to insufficient write privilege

Issue

• When the certmonger service attempts to automatically renew the internal Identity Management (IdM) subsystem certificates, errors similar to the following are visible in /var/log/messages:

Oct 28 15:17:55 ipa01 python: Updating renewal certificate failed: Insufficient access: Insufficient 'add' privilege to add the entry 'cn=auditSigningCert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=example,dc=com'.

Oct 28 15:18:35 ipa01 python: Updating renewal certificate failed: Insufficient access: Insufficient 'add' privilege to add the entry 'cn=subsystemCert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=example,dc=com'.