Description of problem:
kadmin.local -q with wrong value in -e option doesn't return nonzero  return code

[test]kadmin.local -r EXAMPLE.COM -q "addprinc -randkey -e aes256-cts,aes128-cts kvnoprinc"
Authenticating as principal root/admin with password.
add_principal: Invalid argument while parsing keysalts aes256-cts,aes128-cts
usage: add_principal [options] principal
        options are:
                [-x db_princ_args]* [-expire expdate] [-pwexpire pwexpdate] [-maxlife maxtixlife]
                [-kvno kvno] [-policy policy] [-clearpolicy] [-randkey]
                [-pw password] [-maxrenewlife maxrenewlife]
                [-e keysaltlist]
                [{+|-}attribute]
        attributes are:
                allow_postdated allow_forwardable allow_tgs_req allow_renewable
                allow_proxiable allow_dup_skey allow_tix requires_preauth
                requires_hwauth needchange allow_svr password_changing_service
                ok_as_delegate ok_to_auth_as_delegate no_auth_data_required

where,
        [-x db_princ_args]* - any number of database specific arguments.
                        Look at each database documentation for supported arguments
[test]echo $?
0


Version-Release number of selected component (if applicable):
krb5-server-1.11.3-49.el7

How reproducible:
always

Steps to Reproduce:
1.kadmin.local -r EXAMPLE.COM -q "addprinc -randkey -e aes256-cts,aes128-cts kvnoprinc"
2.echo $?
3.

Actual results:
0

Expected results:
nonzero

Additional info:
cpw has incorrect behavior as well

kadmin.local -r EXAMPLE.COM -q "cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc"
Authenticating as principal root/admin with password.
 change_password: Invalid argument while parsing keysalts aes256