TGT shouldn't have multiple ST for the same service

A Ticket-Granting Ticket should not have multiple Service Tickets for
the same service. This ensures we don't create tons of Service Tickets
in case of a redirect loop or other client-side configuration issues.