Add special modify op to regen ipaNTHash
    
    The NT Hash is the same thing as the RC4-HMAC key, so we add a function to
    extract it from krb5 keys if they are available to avoid forcing a password
    change when configuring trust relationships.