Use krb5 keys on new users when plain password not available

Please @kernevil take a look and give us a :+1: before merging