package the right client keytab directory
    
    - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
      since that's what the libraries actually look for
    - add buildrequires on nss-myhostname, in an attempt to get more of the tests
      to run properly during builds