Change the way we determine if the host has a password set.
    
    When creating a host with a password we don't set a Kerberos
    principal or add the Kerberos objectclasses. Those get added when the
    host is enrolled. If one passed in --password= (so no password) then
    we incorrectly thought the user was in fact setting a password, so the
    principal and objectclasses weren't updated.
    
    https://fedorahosted.org/freeipa/ticket/4102