s4-kdc: don't look at global catalog NCs in the kdc