krb5 reg tests have some problems:

1. cross realm TGTs are not correct
2. kdc and hostname must be written to 'localhost', failed on some system, workaround is ugly