ktpass: also use userPrincipalName for locating the principal