Description of problem:

Customer ran into an issue where puppet/puppet-certmonger used the credentials in old ccache files when trying to issue a certificate, rather than looking at the keytab.  This resulted in expired creds being used and a failure to issue a certificate.

The solution to this was to remove the ccache files prior to the deployment.
The ccache was cleared with `kdestroy -A` and it was ran on all our compute nodes, however, The networkers and controllers had a valid ccache at the time so we didn't clear the ccache there but it would have also broken the deployment at some point for sure. KRB5CCNAME was not set so this was the default ccache that was being set/listed.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: