Re-enrolling a client (and possibly adding a password using host-mod once a host is created) results in a client that cannot be enrolled.

I reproduced this with:
- ipa host-add --random test.example.com
- on test.example.com: ipa-client-install -w <password>
- on test.example.com: ipa-client-install --uninstall
- ipa host-mod --random test.example.com
- on test.example.com: ipa-client-install -w <password>

Joining realm failed: principal not found in host entry
Certificate subject base is: O=EXAMPLE.COM

A user in IRC reported the problem using the web UI, he did this:

- created host in webUI
- set the OTP
- tried to enroll