now we are using automatically the machine user for creating the
principles. It is untestet, because there is no host where we need a new
encrypted nfs :(