If use_otp is not enabled, then the principal will be set to "admin" after the discovery has been done. If use_otp is enabled, then the princial will be set to "admin" after the join has been done - as admin will not match with the otp.
