added untested modify_k5login_principals function