restore KADM5_PRINCIPAL_NORMAL_MASK to loading