Allow krb5-principal keys, pass type to key remove