Update procedure for retrieving Kerberos principals from FreeIPA

The old text recommended to use existing keytabs which is considered insecure.
Clarify relation between smart-proxy option dns_key and GSS-TSIG

Option dns_key can't be used if the user wants to use GSS-TSIG.
Grammar fixes