more ldap concerns

[Ken Hornstein]

>I tend to agree that supporting automatic upgrade of enctypes as new
>code is deployed would be nice.  However having enctypes supported by
>default that are not on the krbtgt principal is not all that useful.

I have personally found it useful during a transition period to newer
enctypes.  Maybe that's just me, though (I admit, I generally try to
convince people to upgrade the enctypes on the krbtgt principal, but
some people are squeamish when it comes to this).

--Ken