Go to great lengths to avoid accidentally appending the default Kerberos realm