fixes #6445 - Only do the external authentication setup if passenger is used.
fixes #6445 - ipa-getkeytab cones from ipa-client which is expected on IPA-enrolled machine.