library/ipajoin.py: Fix required_one_of, add mutually_exclusive

The one_of check was using a tuple instead of a list, the check for principal
or keytab has been removed, a new mutually exclusive check for password
xor keytab has been added.