Restart KDC after installing trust support to allow MS PAC generation
    
    Also make sure all exceptions are captured when creating CIFS service
    record. The one we care about is duplicate entry and we do nothing
    in that case anyway.
    
    Also make uniform use of action descriptors.