s4:kdc: fix user2user tgs-requests for normal user accounts