Change ordering so that kerberos tickets get deleted last
Tell AD when UNIX extensions are enabled

Ticket: #7165