allow user/host.name as valid principal

Valid Kerberos principals may consist of an optional component that further identifies the principal.  For example, user/fully.qualified.hostname@EXAMPLE.NET is a valid service principal.  This patch allows more complete validation of principals, necessary for using host-specific principals with harisekhon/nagios-plugins/check_krb5_kdc.pl.