bots: Work around GnuTLS bug with OpenShift kubeconfig
bots: Work around GnuTLS bug with OpenShift kubeconfig

https://github.com/openshift/origin/pull/17414 introduced a second
organization value `system:masters`. Apparently GnuTLS mis-handles
multiple RDNs by re-ordering them and then rejecting the client
certificate due to a mismatching subject.

When building the openshift-prerelease image (and only then), work
around this by regenerating the admin certificate with swapping the `O:`
fields around. This is an utter hack, but unblocks testing OpenShift 3.9
for now.

See https://github.com/openshift/origin/issues/18715 for details.

moraleslazaro/cockpit,SotolitoLabs/cockpit,deryni/cockpit,garrett/cockpit,moraleslazaro/cockpit,stefwalter/cockpit,moraleslazaro/cockpit,mvollmer/cockpit,stefwalter/cockpit,moraleslazaro/cockpit,SotolitoLabs/cockpit,cockpituous/cockpit,andreasn/cockpit,deryni/cockpit,martinpitt/cockpit,deryni/cockpit,andreasn/cockpit,martinpitt/cockpit,mvollmer/cockpit,mareklibra/cockpit,cockpit-project/cockpit,mareklibra/cockpit,cockpituous/cockpit,garrett/cockpit,martinpitt/cockpit,cockpit-project/cockpit,deryni/cockpit,stefwalter/cockpit,martinpitt/cockpit,mareklibra/cockpit,garrett/cockpit,mvollmer/cockpit,andreasn/cockpit,garrett/cockpit,martinpitt/cockpit,mvollmer/cockpit,mareklibra/cockpit,cockpituous/cockpit,deryni/cockpit,cockpit-project/cockpit,garrett/cockpit,mareklibra/cockpit,stefwalter/cockpit,stefwalter/cockpit,SotolitoLabs/cockpit,mareklibra/cockpit,SotolitoLabs/cockpit,cockpit-project/cockpit,mvollmer/cockpit,SotolitoLabs/cockpit,SotolitoLabs/cockpit,moraleslazaro/cockpit,cockpit-project/cockpit,SotolitoLabs/cockpit,andreasn/cockpit,deryni/cockpit,deryni/cockpit,mareklibra/cockpit,cockpituous/cockpit,cockpituous/cockpit,andreasn/cockpit,andreasn/cockpit,moraleslazaro/cockpit,stefwalter/cockpit,andreasn/cockpit,stefwalter/cockpit,cockpituous/cockpit,moraleslazaro/cockpit