s4:kdc Add in a simple check for constrained delegation to self