s4-kdc: prevent segfault on bad trust strings