[krbdev.mit.edu #884] having "-" in key:salt separator list prevents salttype defaulting from working

[Tom Yu via RT]

It turns out that something like the proposed patch is insufficient to get salttype defaulting to 
work.  krb5_string_to_keysalts() should also default to the "normal" salttype rather than -1 
("ignore").