Samba 4.15.5 changed the format of -k to --use-kerberos=required. This format works with samba-tool, but it does not work with net... eg. net ads leave -k worked with 4.15.4 but net ads leave --use-kerberos=required does not work (net prompts for password even though the user is already authenticated).