Really bug in KDC handling of enterprise princs