ipaclient: Krb5 should only be configured if ipaclient_on_master is not set

Krb5 configuration was also done if ipaclient_on_master was set. This
resulted in a reverted configuration while deploying the client part in
a server deploment.

roles/ipaclient/tasks/install.yml

@@ -240,6 +240,7 @@
       sssd: "{{ result_ipaclient_test.sssd }}"
       force: "{{ ipaclient_force }}"
       #on_master: "{{ ipaclient_on_master }}"
+    when: not ipaclient_on_master | bool
 
   - name: Install - IPA API calls for remaining enrollment parts
     ipaclient_api: