s4-kerberos Rework keytab handling to export servicePrincipalName entries