kdc: move more name canonicalization logic to KDC