Thanks for your help so far! On the machines that don't have a /CentrifyDC item in the keychain, I tried running those extra commands but they didn't seem to work.
These are MacOS 10.12.4 running centrify 5.3.3.
I wanted to see if we could get the /CentrifyDC to show up without having do a an unbind and rebind of the machine as I'm not sure if that can be done remotely easily. I did manually unbind and rebind one machine and it brought the /CentrifyDC item into the keychain. However on the other test machine I have that doesn't have the /CentrifyDC item I tried using those other commands.
First the adclient.autoedit: true item in the .conf file was already commented out with a # at the begining of the line so I didn't end up changing that.
when running kinit <computer hostname>$ I get an error: "Configuration file does not specify a default realm"
when running adinfo -A --user <computer hostname>$ <domain> it does ask for the password but after putting that in it gets "Unable to connect to server"
On a happy progress note, I did get the authentication credentails to work for the machines that have a /CentrifyDC item. It turns out when authenticating I had to use the Computername with the trailing $. I was trying to just do the Computername without a $ at the end so that was why it was failing authentication.
I think the only remaining issue now is how to get a /CentrifyDC item back into the keychain on the machines that don't have it without doing a manual unbind and rebind. (if possible)