add krb5_principal_is_krbtgt