Clarify the behavior of the module when realm is specified

The default realm is stripped, auth_gss_format_full can be used
to override this behavior.