Hide krbtgt user in external AD mode