ipa-submit: better describe when -K is needed
An IPA CA expects a principal name to be specified, and we don't use a
default value when any of several of the flags that override other
defaults are used, so update the error message to mention more than just
use of the -N flag as possible triggers for us imposing the requirement
(ticket #46).