Fix account filter script

Unsetting KRB5CCNAME didn't actually fix what I wanted it to; there were
still errors because apparently kinit/kadmin read SUDO_USER even when
specifying the principal to use.

Using a clean environment prevents the errors.