No option to not define final_domain_join_principal

[santachago]

ipa-client-install allows the use of OTP to join a host to the IPA server. This is done by creating the host first on the IPA server and assigning the OTP.
To be used on the ipa-client-install command only the password parameter should be set and the principal should not be defined.
Currently the manifest defines a default principal of admin when the domain_join_principal parameter is not set.

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/client-install#client-install-non-interactive-random

[mattock]

Looks like that process is an orchestration task suitable for Puppet Bolt or Ansible:

1. Create a host on IPA server
2. Get the temporary password
3. Pass the temporary password to ipa-client-intall

What would you propose changing in this module to make the above process work more smoothly?