Hide krbtgt user in external AD mode

Conflicts:
	main/users/ChangeLog