The setkeytab extended operation has been superseeded by the getkeytab extended operation.

Add an option to allow disabling it, but set the current default to allow it, as this old method is still needed for older clients.

We just need the plumbing in place so that in future, we can flip the default to off and then "old" servers will understand it and turn this feature off too.