This apparently works but the kadmind4 drops the connection if it gets
a policy error from kadmind.