Reduce user surprise.  When PAM is configured to use a user_realm that

is different from the default realm, do likewise in kinit with bare
user names.

Qualify keytab principals with best realm from keytab, not the default realm.