[krbdev.mit.edu #1146] string2key gets wrong salt with Heimdal KDC and converted AFS accounts

[Greg Hudson via RT]

Now I'm wondering if Heimdal really sent the extra '@', or if '@' was just 
the garbage after the memory buffer on the reporter's platform.

Unfortunately, I don't think there's any good way to know at this point.