If a user somehow ends up with their default cache type set to MSLSA:, they can only ever have one principal active and there's no way to get out of that state without resorting to cmd.exe or regedit.exe. We should provide a better user experience in this case.