security: remove domain extraction from Kerberos