s4:kdc: disable support for CROSS_ORGANIZATION domains