Two new options are added to the `ktab` command when adding new keytab entries. When `ktab -a username password -s altsalt` is called, `altsalt` is used instead of the default salt. When `ktab -a username password -f` is called, the tool will contact the KDC to fetch the actual salt used.