remctl interface for Kerberos kadmin functions