krb5-samba: interdomain trust uses different salt principal