Is this because for NFS4 service machine  asks, there is need for credentials for machine principal,  the one ending with “$”, and rpc.gssd

asks about  CLIENT.DOMAIN.ORG$@DOMAIN.ORG instead of CLIENT$@DOMAIN.ORG

and that question  depends on what ‘hostname’ returns?

Exactly.