s4:kdc: ignore empty supplementalCredentialsBlob structures