We accidentally reused 2 OIDs assigned to the keytab extedned operation.

In ipa_pwd_extop.c we have:
/ OID to retrieve keytabs /

define KEYTAB_SET_OID "2.16.840.1.113730.3.8.3.1"

define KEYTAB_RET_OID "2.16.840.1.113730.3.8.3.2"

but in the schema we also have:
attributeTypes: (2.16.840.1.113730.3.8.3.1 NAME 'ipaUniqueID' ....
attributeTypes: (2.16.840.1.113730.3.8.3.2 NAME 'ipaClientVersion' ...

This is bad.
The easiest way to fix this is by changing the extended operation OIDs that are used only by IPA. The only side effect is that it will break older ipa-getkeytab binaries. But changing the extended operation OIDs is easier then forcing users of beta2/rc1 to reinstall their servers.