krb5_auth_send: check for sub-domains
    
    If there is an authentication request for a user from a sub-domain a
    temporary sysdb context is generated to allow lookups in the
    corresponding sub-tree in the cache.