Allow cospriority to be updated and fix description of priority ordering
    
    Need to add a few more places where the DN will not be automatically
    normalized. The krb5 server expects a very specific format and normalizing
    causes it to not work.