clarify that ktadd/ktremove are kadmin subcommands