If the user changes the realm, then I suppose we can create a new OTP and set it, but of course, the host isn't going to actually move to the new realm unless the user is doing it with Puppet, rebuilding, or manually.