krb5: do not expand enterprise principals is offline
    
    Expanding a principle to an enterprise principal only makes sense if
    there is a KDC available which can process it. If we are offline the
    plain principal should be used, e.g. to create an expired ccache.
    
    Fixes https://fedorahosted.org/sssd/ticket/2060