When running ipa-client-install we kinit using the keytab we just got from the server in order to perform a DNS update.

If we fail to kinit with that keytab though, we do not bail out and keep trying to DNS update which will obviously fail and then merrily declare installation was successful.

We should just bail out at that point and rollback the installation because failure to get a correct keytab will make it impossible to login anyway as ldap binds from sssd will fail and auth verification will fail.