The use of machine account authentication for domain members in various tools (smbclient, rpcclient, smbcacls, smbcquotas, etc.) is broken. It creates a new, empty /secrets.tdb in the top-level root directory instead.
Fixed in git 3-3-test with d077ef64cd1d9bbaeb936566c2c70da508de829f