Fixes for regenerating kerberos' keytab on reprovision

Also fixed  bug in users module which does not marked it as changed when reprovision was necessary.