kdc: Correctly return the krbtgt/realm@REALM principal from our KDC