Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
Subject: Account lockout not transparently reported to administrators via
 get_principal
X-RT-Original-Encoding: iso-8859-1
Content-Length: 265

kadmin get_principal reports the last successful authentication, the 
last failed authentication, and the number of failed password attempts.  
We should also report:

* The last administrative unlock timestamp
* Whether the account is locked out, and for how long