kadmin has no equivalent of the kinit -T flag, so there is no way to specify an armor ccache when authenticating as the admin principal. This makes it impossible to authenticate using FAST OTP or another FAST factor.