s4-kdc Remove special case kerberos restriction in the KDC