Special thanks to the friendly folks in #kerberos and #freeipa for their time.
Special thanks to the freeipa developers for knowing how to set return codes!

