CAS-1268: Validate registered service before delegating TGT and authentication attempts