dae01950a2
add_enctype() was not fetching the kvno of the principal it was modifying, and it was not setting the kvno of the new keys (instead it set it to 0). This worked fine before multi-kvno, but broke then. The fix is to fetch the kvno and set the new keys' kvno to that. I'm thinking of adding a new kadmin command to prune old kvnos by date or kvno differential...