add +requires_preauth to "kadmin -q ank"