More Kerberos tests for the KDC, correct as-req SPN behaviour

This branch brings more tests to our AD DC, confirming in particular the case of a UPN being the same as the SPN.