ipa-submit: better describe when -K is needed
    
    An IPA CA expects a principal name to be specified, and we don't use a
    default value when any of several of the flags that override other
    defaults are used, so update the error message to mention more than just
    use of the -N flag as possible triggers for us imposing the requirement
    (ticket #46).