Reduce user surprise.  When PAM is configured to use a user_realm that

is different from the default realm, do likewise in kinit with bare
user names.

Qualify keytab principals with best realm from keytab, not the default realm.

The code has been updated, please take another look.