Resolves: pki trac ticket #1527,1664,2463,2466,2475,2476,2478,2483,2496,2497,
              2505
    
    * Mon Oct 10 2016 Dogtag Team <pki-devel@redhat.com> 10.3.5-7
    - PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
    - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
      user on multiple tokens. (jmagne)
    - PKI TRAC Ticket #2463 - Troubleshooting improvements (edewata)
    - PKI TRAC Ticket #2466 - two-step externally-signed CA installation fails due
      to missing AuthorityID (ftweedal)
    - PKI TRAC Ticket #2475 - Multiple host authority entries created (ftweedal)
    - PKI TRAC Ticket #2476 - Dogtag 10.4.0 Miscellaneous Minor Changes
      (edewata)
    - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a
      dependency package (mharmsen)
    - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed
      tokens (jmagne)
    - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial
      number and key id on the ldap user mismatches (cfu)
    - PKI TRAC Ticket #2497 - KRA installation failed against externally-signed CA
      with partial certificate chain (edewata)
    - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar
      files (edewata)