s4-kdc Use msDS-SecondaryKrbTgtNumber to fill in the full KVNO