Pass full principal when creating a kerberos AP_REQ

Bug: 907297