selftest: Run krb5.kdc with an account that has a UPN and an SPN