modify realm_of_tgt to use krb5_princ_realm()