Require principals for krb5_keytab