made krb5_principal_regex a bit more flexible