Allow the kerberos realm to be NULL, we're going to generate it like we do with AD