kadmin.local "ank -randkey" ignores kdc.conf's default_principal_flags?

[Adam Megacz]

Related to my previous posting, I find that even though I have

  default_principal_flags = +preauth

in kdc.conf, when I use kadmin.local's "ank -randkey" command to create
a service principal, the principal is created with no attributes.
Principals created with "addprinc" and a password provided wind up with
the default attributes.

Again, is this behavior by design?

  - a