[krbdev.mit.edu #7100] trunk a86e885 does not deal with default salt

[Greg Hudson via RT]

I see the bug.  I'm cleaning up the ASN.1 tests a little bit and adding a 
unit test case with the fix.

Regression tests don't catch this because the trunk KDC always sends an 
explicit salt (r25410).