In krb5_get_self_cred_from_kdc() we convert the server principal to enterprise form in case we need to query a remote realm. We do not use the realm of the result, but the parsing step fails if the context has no default realm.